53 lines
1.5 KiB
Plaintext
53 lines
1.5 KiB
Plaintext
import os
|
|
import shlex
|
|
|
|
file_id = (params_kw or {}).get('id', '').strip()
|
|
|
|
uid = await get_user()
|
|
if not uid:
|
|
uid = 'user-01'
|
|
|
|
dbname = get_module_dbname('pipeline-sdlc')
|
|
workspace_base = '/d/pipeline/workspaces'
|
|
|
|
async with DBPools().sqlorContext(dbname) as sor:
|
|
recs = await sor.sqlExe(
|
|
"SELECT current_project_id FROM pipeline_agent_settings WHERE user_id=${u}$", {"u": uid})
|
|
pid = getattr(recs[0], 'current_project_id', '') if recs else ''
|
|
ws_dir = ''
|
|
if pid:
|
|
proj = await sor.sqlExe("SELECT name, org_id, workspace_dir FROM sd_projects WHERE id=${p}$", {"p": pid})
|
|
if proj:
|
|
ws = getattr(proj[0], 'workspace_dir', '') or ''
|
|
if ws.startswith('/'):
|
|
ws_dir = ws
|
|
else:
|
|
pname = getattr(proj[0], 'name', '')
|
|
org_id = getattr(proj[0], 'org_id', '0') or '0'
|
|
ws_dir = workspace_base + '/' + org_id + '/' + pname
|
|
|
|
if not file_id or not ws_dir:
|
|
r = DictObject()
|
|
r.host = 'localhost'
|
|
r.username = 'pipeline'
|
|
r.cmdargs = ['echo 未指定文件']
|
|
return r
|
|
|
|
full_path = ws_dir + '/' + file_id
|
|
|
|
# 路径穿越校验
|
|
real_ws = os.path.realpath(ws_dir)
|
|
real_full = os.path.realpath(full_path)
|
|
if not real_full.startswith(real_ws + os.sep):
|
|
r = DictObject()
|
|
r.host = 'localhost'
|
|
r.username = 'pipeline'
|
|
r.cmdargs = ['echo 非法路径']
|
|
return r
|
|
|
|
r = DictObject()
|
|
r.host = 'localhost'
|
|
r.username = 'pipeline'
|
|
r.cmdargs = ['vi ' + shlex.quote(full_path)]
|
|
return r
|