opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(shell): move path boundary guard after safe-path check

Browse source
This commit is contained in:
李龙 0668001470 2026-03-16 09:16:34 +08:00
parent 3981a1a58e
commit 1c62971dc3
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
pkg/tools/shell.go
View file

@ -407,10 +407,6 @@ func (t *ExecTool) guardCommand(command, cwd string) string {
}
}
if !isPathBoundary(cmd, loc[0]) {
continue
}
p, err := filepath.Abs(raw)
if err != nil {
continue
@ -420,6 +416,10 @@ func (t *ExecTool) guardCommand(command, cwd string) string {
continue
}
if !isPathBoundary(cmd, loc[0]) {
continue
}
rel, err := filepath.Rel(cwdPath, p)
if err != nil {
continue