koishi-plugin-spawn-modified 1.2.2 → 1.2.3

package/lib/index.js

@@ -75,11 +75,29 @@ exports.inject = {
 // 当前工作目录状态管理
 var sessionDirs = new Map();
 // 命令过滤：支持黑名单/白名单模式
+function buildRegex(entry) {
+    try {
+        return new RegExp(entry, 'i');
+    }
+    catch (_) {
+        // 回退为逐字匹配，防止用户写了非法正则
+        var escaped = entry.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+        try {
+            return new RegExp(escaped, 'i');
+        }
+        catch (_) {
+            return null;
+        }
+    }
+}
 function isCommandBlocked(command, mode, list) {
     if (!(list === null || list === void 0 ? void 0 : list.length))
         return false;
-    var trimmedCommand = command.trim().toLowerCase();
-    var hit = list.some(function (entry) { return trimmedCommand.startsWith(entry.toLowerCase()); });
+    var trimmedCommand = command.trim();
+    var hit = list.some(function (entry) {
+        var regex = buildRegex(entry);
+        return regex ? regex.test(trimmedCommand) : false;
+    });
     return mode === 'blacklist' ? hit : !hit;
 }
 // 解析 cd 命令并验证路径

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "koishi-plugin-spawn-modified",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Run shell commands with Koishi",
   "keywords": [
     "bot",

package/src/index.ts

@@ -59,10 +59,27 @@ export const inject = {
 const sessionDirs = new Map<string, string>()
 
 // 命令过滤：支持黑名单/白名单模式
+function buildRegex(entry: string): RegExp | null {
+  try {
+    return new RegExp(entry, 'i')
+  } catch (_) {
+    // 回退为逐字匹配，防止用户写了非法正则
+    const escaped = entry.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+    try {
+      return new RegExp(escaped, 'i')
+    } catch (_) {
+      return null
+    }
+  }
+}
+
 function isCommandBlocked(command: string, mode: 'blacklist' | 'whitelist', list: string[]): boolean {
   if (!list?.length) return false
-  const trimmedCommand = command.trim().toLowerCase()
-  const hit = list.some(entry => trimmedCommand.startsWith(entry.toLowerCase()))
+  const trimmedCommand = command.trim()
+  const hit = list.some(entry => {
+    const regex = buildRegex(entry)
+    return regex ? regex.test(trimmedCommand) : false
+  })
   return mode === 'blacklist' ? hit : !hit
 }