fix: validate jq program compilation

holochain-open-dev · Aug 1, 2024 · 8dcb94d · 8dcb94d
1 parent 907f6ef
commit 8dcb94d
Showing 1 changed file with 12 additions and 5 deletions.
diff --git a/crates/username_registry_validation/src/recipe.rs b/crates/username_registry_validation/src/recipe.rs
@@ -1,5 +1,6 @@
 use hdi::prelude::*;
 use holoom_types::recipe::{JqInstructionArgumentNames, Recipe, RecipeInstruction};
+use jaq_wrapper::compile_filter;
 
 pub fn validate_create_recipe(
     _action: EntryCreationAction,
@@ -39,11 +40,17 @@ pub fn validate_create_recipe(
             RecipeInstruction::GetDocsListedByVar { var_name } => vec![var_name],
             RecipeInstruction::GetLatestDocWithIdentifier { var_name } => vec![var_name],
             RecipeInstruction::Jq {
-                input_var_names, ..
-            } => match input_var_names {
-                JqInstructionArgumentNames::List { var_names } => var_names,
-                JqInstructionArgumentNames::Single { var_name } => vec![var_name],
-            },
+                input_var_names,
+                program,
+            } => {
+                if compile_filter(&program).is_err() {
+                    return Ok(ValidateCallbackResult::Invalid("Invalid jq program".into()));
+                }
+                match input_var_names {
+                    JqInstructionArgumentNames::List { var_names } => var_names,
+                    JqInstructionArgumentNames::Single { var_name } => vec![var_name],
+                }
+            }
         };
         for dependency in var_dependencies {
             if !declared_vars_names.contains(&dependency) {