sdaduanbilei/agent-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 添加 glob 函数 pattern 参数的安全验证

Browse Source
This commit is contained in:
scorpio 2026-03-10 09:34:57 +08:00
parent ac21126d2b
commit 9a4ff4713a
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
internal/room/tools/executor.go
View File

@ -66,6 +66,11 @@ func (e *Executor) glob(args string) (string, error) {
return "", err return "", err
} }
_, err := e.safePath(a.Pattern)
if err != nil {
return "", err
}
pattern := filepath.Join(e.workspaceDir, a.Pattern) pattern := filepath.Join(e.workspaceDir, a.Pattern)
files, err := filepath.Glob(pattern) files, err := filepath.Glob(pattern)
if err != nil { if err != nil {