LukeMackin/Yuzu-GCA
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: exec默认cwd也走safePath(审查)

Browse Source
This commit is contained in:
LukeMackin
2026-07-22 20:30:04 +08:00
parent 37c6605582
commit 282bc79510
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/server/src/tools.ts
View File

@@ -61,7 +61,7 @@ function sanitizeCommand(cmd: string): string {
export async function exec(args: { command: string; cwd?: string; timeout?: number }): Promise<any> { export async function exec(args: { command: string; cwd?: string; timeout?: number }): Promise<any> {
const command = sanitizeCommand(args.command); const command = sanitizeCommand(args.command);
const cwd = args.cwd ? safePath(args.cwd) : process.cwd(); const cwd = safePath(args.cwd ?? ".");
try { try {
const stdout = execSync(command, { cwd, timeout: args.timeout ?? 30000, encoding: "utf8", maxBuffer: 10*1024*1024, stdio: ["pipe","pipe","pipe"] }); const stdout = execSync(command, { cwd, timeout: args.timeout ?? 30000, encoding: "utf8", maxBuffer: 10*1024*1024, stdio: ["pipe","pipe","pipe"] });
return { ok: true, stdout: stdout.toString(), stderr: "" }; return { ok: true, stdout: stdout.toString(), stderr: "" };