@wrongstack/tools 0.8.0 → 0.8.4

package/dist/builtin.js

@@ -3337,8 +3337,11 @@ var BLOCKED_ARG_PATTERNS = {
   docker: [/^build$/, /^run$/, /^exec$/, /^push$/, /^pull$/],
   // find -exec/-ok/-execdir execute arbitrary commands
   find: [/^-exec$/, /^-exec;$/, /^-ok$/, /^-ok;$/, /^-execdir$/, /^-execdir;$/, /^-exec=/, /^-ok=/, /^-execdir=/],
-  // rm -rf / is catastrophic — block absolute paths, home, and dot-dir targets
-  rm: [/^\//, /^~/, /^\.{1,2}$/],
+  // rm -rf / is catastrophic — block absolute paths, home, dot-dirs,
+  // and glob patterns that could expand to dangerous targets.
+  // `rm -rf ./src/*` expands to project files; `rm -rf ../../` escapes upward;
+  // `rm -rf /*` targets the filesystem root. All are blocked.
+  rm: [/^\//, /^~\//, /^~$/, /^\.$/, /^\.\.$/, /\*$/, /\/$/, /\/\*$/, /\.\//],
   // npm run/exec/create/pack/publish can execute arbitrary scripts or publish malware
   npm: [/^run$/, /^exec$/, /^create$/, /^init$/, /^pack$/, /^publish$/, /^deploy$/],
   // pnpm run/dlx/exec/create can execute arbitrary scripts
@@ -4553,7 +4556,7 @@ var installTool = {
     ) : [];
     const PKG_NAME_RE = /^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/i;
     for (const pkg of pkgList) {
-      if (!PKG_NAME_RE.test(pkg) || pkg.startsWith("-")) {
+      if (!PKG_NAME_RE.test(pkg) || pkg.startsWith("-") || pkg.length > 200) {
         yield {
           type: "final",
           output: {