opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: sandbox deny patterns - use (\s|$) instead of \b for find / and ls /

Browse source
This commit is contained in:
Slobodan Ilic 2026-04-27 14:39:39 +00:00
parent a11f19b841
commit 91201720e2
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pkg/tools/shell.go
View file

@ -95,8 +95,8 @@ var (
regexp.MustCompile(`\bssh\b.*@`),
regexp.MustCompile(`\beval\b`),
regexp.MustCompile(`\bsource\s+.*\.sh\b`),
regexp.MustCompile(`\bfind\s+/\b`), // find / - traverse entire filesystem
regexp.MustCompile(`\bls\s+/\b`), // ls / - list root directory
regexp.MustCompile(`\bfind\s+/(\s|$)`), // find / - traverse entire filesystem
regexp.MustCompile(`\bls\s+/(\s|$)`), // ls / - list root directory
}
// absolutePathPattern matches absolute file paths in commands (Unix and Windows).