Ensure only JSON is used for demo configuration (#453)

Financial-Times · May 18, 2017 · 7d06aea · 7d06aea
1 parent 7a172e7
commit 7d06aea
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/tasks/demo.js b/lib/tasks/demo.js
@@ -94,7 +94,12 @@ function buildHtml(gulp, buildConfig) {
 	if (typeof buildConfig.demo.data === 'string') {
 		const dataPath = path.join(buildConfig.cwd, '/' + buildConfig.demo.data);
 		if (fs.existsSync(dataPath)) {
-			const fileData = require(dataPath);
+			let fileData;
+			try {
+				fileData = JSON.parse(fs.readFileSync(dataPath));
+			} catch (error) {
+				throw new Error(`Demo data file is not valid JSON ${dataPath}`);
+			}
 			if (typeof fileData === 'function') {
 				data = fileData();
 			} else {