More sophisticated parsing of the bash command
Open
- Dominant language
- Clojure
- Stars
- 775
- Forks
- 83
- PR merge metrics
- No merged PRs in 30d
Description
We are already pulling out file paths in the bash command to reject the command if it has paths that are not allowed in it.
It would be good to have more sophisticated parsing to prevent things like
`git -A`
and many more.
A probably safer alternative is to submit the command to an agent who decides whether it is safe?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.