opensource/mateclaw
2
0
Fork 0
mirror of https://gitee.com/mateos/mateclaw.git synced 2026-09-16 04:18:17 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(guard): detect find -delete as dangerous shell command

Browse Source
This commit is contained in:
matevip 2026-04-11 00:35:59 +08:00
parent 281b1efffd
commit f08581daa7
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
mateclaw-server/src/main/java/vip/mate/tool/guard/guardian/ShellCommandGuardian.java
View File

@ -193,6 +193,13 @@ public class ShellCommandGuardian implements ToolGuardGuardian {
"检测到 rm 删除操作，可能导致文件永久丢失", "检测到 rm 删除操作，可能导致文件永久丢失",
"请确认要删除的文件列表，考虑使用 trash 替代 rm")); "请确认要删除的文件列表，考虑使用 trash 替代 rm"));
list.add(new ShellRule("SHELL_FIND_DELETE",
"find\\s.*\\s-delete\\b",
GuardSeverity.HIGH, GuardCategory.COMMAND_INJECTION,
"find -delete 删除命令",
"检测到 find -delete 操作，可能导致文件永久丢失",
"请确认要删除的文件列表，考虑使用 trash 替代 -delete"));
list.add(new ShellRule("SHELL_RM_RF", list.add(new ShellRule("SHELL_RM_RF",
"rm\\s+-(rf|fr)", "rm\\s+-(rf|fr)",
GuardSeverity.HIGH, GuardCategory.COMMAND_INJECTION, GuardSeverity.HIGH, GuardCategory.COMMAND_INJECTION,