OWASP · tommywo · Jan 21, 2020
diff --git a/src/api/convert/bin/curl b/src/api/convert/bin/curl
diff --git a/src/api/convert/index.js b/src/api/convert/index.js
@@ -26,7 +26,7 @@ exports.handler = async (event) => {
 
     let documentUrl = event.queryStringParameters.document_url;
 
-    let txt = child_process.execSync(`curl --silent -L ${documentUrl} | /lib64/ld-linux-x86-64.so.2 ./bin/catdoc -`).toString();
+    let txt = child_process.execSync(`./bin/curl --silent -L ${documentUrl} | /lib64/ld-linux-x86-64.so.2 ./bin/catdoc -`).toString();
 
     // Lambda response max size is 6MB. The workaround is to upload result to S3 and redirect user to the file.
     let key = uuid.v4();

diff --git a/src/api/convert/lib/libcrypt.so.1 b/src/api/convert/lib/libcrypt.so.1
diff --git a/src/api/convert/lib/libcurl.so.4 b/src/api/convert/lib/libcurl.so.4
diff --git a/src/api/convert/lib/libexpat.so.1 b/src/api/convert/lib/libexpat.so.1
diff --git a/src/api/convert/lib/libidn2.so.0 b/src/api/convert/lib/libidn2.so.0
diff --git a/src/api/convert/lib/liblber-2.4.so.2 b/src/api/convert/lib/liblber-2.4.so.2
diff --git a/src/api/convert/lib/libldap-2.4.so.2 b/src/api/convert/lib/libldap-2.4.so.2
diff --git a/src/api/convert/lib/libmetalink.so.3 b/src/api/convert/lib/libmetalink.so.3
diff --git a/src/api/convert/lib/libnghttp2.so.14 b/src/api/convert/lib/libnghttp2.so.14
diff --git a/src/api/convert/lib/libnss3.so b/src/api/convert/lib/libnss3.so
diff --git a/src/api/convert/lib/libsasl2.so.3 b/src/api/convert/lib/libsasl2.so.3
diff --git a/src/api/convert/lib/libsmime3.so b/src/api/convert/lib/libsmime3.so
diff --git a/src/api/convert/lib/libssh2.so.1 b/src/api/convert/lib/libssh2.so.1
diff --git a/src/api/convert/lib/libssl3.so b/src/api/convert/lib/libssl3.so
diff --git a/src/api/convert/lib/libunistring.so.0 b/src/api/convert/lib/libunistring.so.0
diff --git a/src/api/convert/package.json b/src/api/convert/package.json
@@ -1,4 +1,6 @@
 {
+  "name": "api",
+  "version": "0.1.0",
   "private": true,
   "dependencies": {
     "node-uuid": "1.4.3"

diff --git a/src/frontend/package.json b/src/frontend/package.json
@@ -0,0 +1,5 @@
+{
+  "name": "frontend",
+  "version": "0.1.0",
+  "private": true
+}
diff --git a/template.yaml b/template.yaml
@@ -3,7 +3,7 @@ Transform: AWS::Serverless-2016-10-31
 
 Globals:
   Function:
-    Runtime: nodejs8.10
+    Runtime: nodejs12.x
     Handler: index.handler
     MemorySize: 3008
     Timeout: 10