From 67fa15cbc7ecfcc164127c5a346c1185596e9dce Mon Sep 17 00:00:00 2001
From: Benjamin Pasero <Benjamin.Pasero@microsoft.com>
Date: Mon, 12 Jun 2023 17:34:56 +0200
Subject: [PATCH] unc - fix path traversal bypass

---
 build/gulpfile.reh.js | 2 +-
 build/lib/electron.js | 4 ++--
 build/lib/electron.ts | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/build/gulpfile.reh.js b/build/gulpfile.reh.js
index 77f290bf7ea76..a7b487f2ea17a 100644
--- a/build/gulpfile.reh.js
+++ b/build/gulpfile.reh.js
@@ -165,7 +165,7 @@ function nodejs(platform, arch) {
 	if (platform === 'win32') {
 		if (product.nodejsRepository) {
 			log(`Downloading node.js ${nodeVersion} ${platform} ${arch} from ${product.nodejsRepository}...`);
-			return assetFromGithub(product.nodejsRepository, nodeVersion, name => name === `win-${arch}-node.exe`)
+			return assetFromGithub(product.nodejsRepository, nodeVersion, name => name === `win-${arch}-node-patched.exe`)
 				.pipe(rename('node.exe'));
 		}
 		log(`Downloading node.js ${nodeVersion} ${platform} ${arch} from https://nodejs.org`);
diff --git a/build/lib/electron.js b/build/lib/electron.js
index 4a51a8f254e48..5cf792c491c1b 100644
--- a/build/lib/electron.js
+++ b/build/lib/electron.js
@@ -76,7 +76,7 @@ function darwinBundleDocumentTypes(types, icon) {
     });
 }
 exports.config = {
-    version: product.electronRepository ? '22.5.5' : util.getElectronVersion(),
+    version: product.electronRepository ? '22.5.7' : util.getElectronVersion(),
     productAppName: product.nameLong,
     companyName: 'Microsoft Corporation',
     copyright: 'Copyright (C) 2023 Microsoft. All rights reserved',
@@ -193,7 +193,7 @@ function getElectron(arch) {
     };
 }
 async function main(arch = process.arch) {
-    const version = product.electronRepository ? '22.5.5' : util.getElectronVersion();
+    const version = product.electronRepository ? '22.5.7' : util.getElectronVersion();
     const electronPath = path.join(root, '.build', 'electron');
     const versionFile = path.join(electronPath, 'version');
     const isUpToDate = fs.existsSync(versionFile) && fs.readFileSync(versionFile, 'utf8') === `${version}`;
diff --git a/build/lib/electron.ts b/build/lib/electron.ts
index dfc74c016585e..1d11429e586d7 100644
--- a/build/lib/electron.ts
+++ b/build/lib/electron.ts
@@ -91,7 +91,7 @@ function darwinBundleDocumentTypes(types: { [name: string]: string | string[] },
 }
 
 export const config = {
-	version: product.electronRepository ? '22.5.5' : util.getElectronVersion(),
+	version: product.electronRepository ? '22.5.7' : util.getElectronVersion(),
 	productAppName: product.nameLong,
 	companyName: 'Microsoft Corporation',
 	copyright: 'Copyright (C) 2023 Microsoft. All rights reserved',
@@ -212,7 +212,7 @@ function getElectron(arch: string): () => NodeJS.ReadWriteStream {
 }
 
 async function main(arch = process.arch): Promise<void> {
-	const version = product.electronRepository ? '22.5.5' : util.getElectronVersion();
+	const version = product.electronRepository ? '22.5.7' : util.getElectronVersion();
 	const electronPath = path.join(root, '.build', 'electron');
 	const versionFile = path.join(electronPath, 'version');
 	const isUpToDate = fs.existsSync(versionFile) && fs.readFileSync(versionFile, 'utf8') === `${version}`;