|
@@ -122,7 +122,8 @@ raw command text and are **not** home-expanded.
|
|
|
working directory, not every path embedded in a command. Prefer a narrow shell allowlist over patterns intended to
|
|
working directory, not every path embedded in a command. Prefer a narrow shell allowlist over patterns intended to
|
|
|
identify every dangerous command. Shell permission scanning identifies commands introduced by shell syntax, but it
|
|
identify every dangerous command. Shell permission scanning identifies commands introduced by shell syntax, but it
|
|
|
does not inspect source, callbacks, plugins, package scripts, remote commands, or other executable behavior delegated
|
|
does not inspect source, callbacks, plugins, package scripts, remote commands, or other executable behavior delegated
|
|
|
- through an allowed program. For example, allowing `npm *`, `make *`, or `ssh *` also trusts what that program executes.
|
|
|
|
|
|
|
+ through an allowed program. For example, allowing `npm *`, `make *`, or `ssh *` also trusts what that program
|
|
|
|
|
+ executes.
|
|
|
</Callout>
|
|
</Callout>
|
|
|
|
|
|
|
|
Relative mutation paths cannot escape the active Location, and symlink escapes
|
|
Relative mutation paths cannot escape the active Location, and symlink escapes
|