fix(node): Only read JavaScript and TypeScript source files in ContextLines

[timfish]

ContextLines read context lines from any filename in a parsed stack trace. An app that copies external input into error.stack before captureException let that input name any file on disk, such as .env, and the SDK sent its lines to Sentry.

The integration now reads only files with a JS or TS source extension, plus .vue, .svelte, .astro and .mdx. Query strings and hashes are stripped first so Vite style index.js?v=abc frames still pass. The Deno SDK gets the same check.

An extension allowlist was chosen over require.cache or a project root check: the module cache does not cover ESM, and root checks break monorepos and symlinked installs.

[JPeer264]

nice

[github-actions]

size-limit report 📦

Path	Size	% Change	Change
@sentry/browser	29.88 kB	-	-
@sentry/browser - with treeshaking flags	28.02 kB	-	-
@sentry/browser - with treeshaking flags tracing without tracing	27.92 kB	-	-
@sentry/browser (incl. Tracing)	52.07 kB	-	-
@sentry/browser (incl. Tracing + Span Streaming)	52.07 kB	-	-
@sentry/browser (incl. Tracing, Profiling)	55.02 kB	-	-
@sentry/browser (incl. Tracing, Replay)	91.82 kB	-	-
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	80.68 kB	-	-
@sentry/browser (incl. Tracing, Replay with Canvas)	96.55 kB	-	-
@sentry/browser (incl. Tracing, Replay, Feedback)	109.49 kB	-	-
@sentry/browser (incl. Feedback)	47.4 kB	-	-
@sentry/browser (incl. sendFeedback)	34.94 kB	-	-
@sentry/browser (incl. FeedbackAsync)	40.05 kB	-	-
@sentry/browser (incl. Metrics)	30.9 kB	-	-
@sentry/browser (incl. Logs)	31.18 kB	-	-
@sentry/browser (incl. Metrics & Logs)	31.81 kB	-	-
@sentry/react	31.7 kB	-	-
@sentry/react (incl. Tracing)	54.39 kB	-	-
@sentry/vue	38.04 kB	-	-
@sentry/vue (incl. Tracing)	55.01 kB	-	-
@sentry/svelte	29.9 kB	-	-
@sentry/remix (Remix 3 client bundle)	57.08 kB	-	-
CDN Bundle	31.64 kB	-	-
CDN Bundle (incl. Tracing)	52.58 kB	-	-
CDN Bundle (incl. Logs, Metrics)	33.84 kB	-	-
CDN Bundle (incl. Tracing, Logs, Metrics)	54.52 kB	-	-
CDN Bundle (incl. Replay, Logs, Metrics)	74.77 kB	-	-
CDN Bundle (incl. Tracing, Replay)	90.25 kB	-	-
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	92.18 kB	-	-
CDN Bundle (incl. Tracing, Replay, Feedback)	96.4 kB	-	-
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	98.34 kB	-	-
CDN Bundle - uncompressed	93.18 kB	-	-
CDN Bundle (incl. Tracing) - uncompressed	156.03 kB	-	-
CDN Bundle (incl. Logs, Metrics) - uncompressed	99.72 kB	-	-
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	161.99 kB	-	-
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	229.76 kB	-	-
CDN Bundle (incl. Tracing, Replay) - uncompressed	276.2 kB	-	-
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	282.14 kB	-	-
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	289.9 kB	-	-
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	295.84 kB	-	-
@sentry/nextjs (client)	56.84 kB	-	-
@sentry/sveltekit (client)	52.45 kB	-	-
@sentry/core/server	41.12 kB	-	-
@sentry/core/browser	13.81 kB	-	-
@sentry/node	155.1 kB	+0.05%	+66 B 🔺
@sentry/node/import (ESM hook with diagnostics-channel injection)	84.06 kB	-	-
@sentry/node - without tracing	96.78 kB	+0.09%	+87 B 🔺
@sentry/node - without channel injection	133.12 kB	+0.04%	+51 B 🔺
@sentry/aws-serverless	104.94 kB	+0.05%	+51 B 🔺
@sentry/cloudflare (withSentry) - minified	210.78 kB	-	-
@sentry/cloudflare (withSentry)	522.89 kB	-	-
@sentry/nextjs/cloudflare (withSentry) - minified	228.46 kB	-	-

View base workflow run