kibana/packages
Alexey Antonov 69c4eb2859
Enable prototype pollution protection in TSVB (#85952) (#87087)
* Enable prototype pollution protection in TSVB

Closes #78908

* Update Dock API Changes

* Replace logging failed in validateObject validation with 400 error

* Move validateObject to kbn-std package and add a description

* Update Doc API Changes

* Rename validateObject function to ensureNoUnsafeProperties

* Rename other validateObject occurrences

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>

Co-authored-by: Diana Derevyankina <54894989+DziyanaDzeraviankina@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2020-12-31 12:58:36 +03:00
..
elastic-datemath chore(NA): move into single pkg json (#80015) (#82378) 2020-11-02 23:22:35 +00:00
elastic-eslint-config-kibana Update typescript eslint to v4.8 (#83520) (#83677) 2020-11-18 20:50:46 +01:00
elastic-safer-lodash-set chore(NA): move into single pkg json (#80015) (#82378) 2020-11-02 23:22:35 +00:00
kbn-ace chore(NA): move into single pkg json (#80015) (#82378) 2020-11-02 23:22:35 +00:00
kbn-analytics [7.x] [Telemetry] Application Usage track sub application views (#85765) (#86072) 2020-12-16 06:11:57 +02:00
kbn-apm-config-loader [CI] Updates branch env variables (#86712) (#86865) 2020-12-23 09:00:18 -08:00
kbn-babel-code-parser Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-babel-preset Update code-comments describing babel plugins (#84622) (#84655) 2020-12-01 17:38:44 +01:00
kbn-config [7.x] Add server.publicBaseUrl config (#85075) (#85361) 2020-12-09 16:10:16 -07:00
kbn-config-schema Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-dev-utils Convert a README to mdx to get it slurped up by the new docs system (#84834) (#85335) 2020-12-08 20:46:03 -05:00
kbn-es Explicitly set Elasticsearch heap size during CI and local development (#86513) (#86573) 2020-12-18 19:56:24 -05:00
kbn-es-archiver Converts some Mocha unit tests to Jest (#85514) (#85687) 2020-12-10 18:32:22 -08:00
kbn-eslint-import-resolver-kibana Consolidates Jest configuration files and scripts (#82671) (#83362) 2020-11-13 13:25:06 -08:00
kbn-eslint-plugin-eslint Converts some Mocha unit tests to Jest (#85514) (#85687) 2020-12-10 18:32:22 -08:00
kbn-expect [7.x] [kbn/bootstrap] validate that certain deps don't ship in production (#80549) (#80710) 2020-10-15 12:00:44 -07:00
kbn-i18n Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-interpreter Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-legacy-logging Improve logging pipeline in @kbn/legacy-logging (#84629) (#84868) 2020-12-03 13:54:20 +01:00
kbn-logging Add rolling-file appender to core logging (#84735) (#85524) 2020-12-10 12:26:43 +01:00
kbn-monaco Handle multiple monaco editor instances for Painless lang (#85834) (#85962) 2020-12-15 13:45:11 -05:00
kbn-optimizer [7.x] Create vis_type_xy plugin to replace histogram, area and line charts (#78154) (#86534) 2020-12-18 22:00:58 -06:00
kbn-plugin-generator Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-plugin-helpers [7.x] [kbn/plugin-helpers/build] copy the public assets of a plugin (#83458) (#83493) 2020-11-16 16:47:40 -07:00
kbn-pm chore(NA): add resolution for chokidar to prevent fsevents@1.x (#85171) (#85501) 2020-12-10 13:46:23 +00:00
kbn-release-notes Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-spec-to-console [7.x] Removes Grunt abstraction from CI tasks (#85210) (#85448) 2020-12-09 14:54:03 -08:00
kbn-std Enable prototype pollution protection in TSVB (#85952) (#87087) 2020-12-31 12:58:36 +03:00
kbn-storybook chore(NA): move into single pkg json (#80015) (#82378) 2020-11-02 23:22:35 +00:00
kbn-telemetry-tools Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00
kbn-test [7.x] [ftr/flags] improve help text (#86971) (#86976) 2020-12-28 16:26:06 -07:00
kbn-test-subj-selector Converts some Mocha unit tests to Jest (#85514) (#85687) 2020-12-10 18:32:22 -08:00
kbn-ui-framework [@kbn/ui-framework] Removes all but dist files (#85347) (#85599) 2020-12-10 11:32:31 -08:00
kbn-ui-shared-deps chore(NA): move into single pkg json (#80015) (#82378) 2020-11-02 23:22:35 +00:00
kbn-utility-types chore(NA): move into single pkg json (#80015) (#82378) 2020-11-02 23:22:35 +00:00
kbn-utils Upgrade Node.js to version 14 (#83425) (#84846) 2020-12-03 09:35:10 +01:00
README.md Jest multi-project configuration (#77894) (#84826) 2020-12-02 14:02:21 -08:00

Kibana-related packages

This folder contains packages that are intended for use in Kibana and Kibana plugins.

tl;dr:

  • Don't publish to npm registry
  • Always use the @kbn namespace
  • Always set "private": true in package.json

Using these packages

We no longer publish these packages to the npm registry. Now, instead of specifying a version when including these packages, we rely on yarn workspaces, which sets up a symlink to the package.

For example if you want to use the @kbn/i18n package in Kibana itself, you can specify the dependency like this:

"@kbn/i18n": "1.0.0"

However, if you want to use this from a Kibana plugin, you need to use a link: dependency and account for the relative location of the Kibana repo, so it would instead be:

"@kbn/i18n": "link:../../kibana/packages/kbn-i18n"

How all of this works is described in more detail in the @kbn/pm docs.

Creating a new package

Create a new sub-folder. The name of the folder should mirror the name in the package's package.json. E.g. if the name is @kbn/i18n the folder name should be kbn-i18n.

All new packages should use the @kbn namespace, and should be marked with "private": true.

Unit tests for a package

Currently there are two patterns used to test packages, one using Mocha and one using Jest. These patterns emerged out of convention and we'd like to make them more similar to each other in the near future.

1. Mocha

Today a package can follow the pattern of having a __tests__ directory in each source code directory of a package which contains the tests for that module. These are usually run by Mocha.

If a package's tests should be run with Mocha, you'll have to opt-in to run them by appending the package's test file pattern(s) to Kibana's src/dev/mocha/run_mocha_cli.js file. These will then be run by the unit test runner.

  • yarn test or yarn grunt test runs all unit tests.
  • node scripts/mocha runs all Mocha tests.

2. Jest

A package can also follow the pattern of having .test.js files as siblings of the source code files, and these run by Jest.

A package using the .test.js naming convention will have those tests automatically picked up by Jest and run by the unit test runner, currently mapped to the Kibana test script in the root package.json.

  • yarn test or yarn grunt test runs all unit tests.
  • yarn jest runs all Jest tests in Kibana.

Each package can also specify its own test script in the package's package.json, for cases where you'd prefer to run the tests from the local package directory.