crackerjack 0.33.5__py3-none-any.whl → 0.33.7__py3-none-any.whl

crackerjack/services/secure_subprocess.py

@@ -87,7 +87,7 @@ class SecureSubprocessExecutor:
         self.security_logger = get_security_logger()
 
         self.dangerous_patterns = [
-            r"[;&|`$(){}[\]<>*?~]",
+            r"[;&|`$()[\]<>*?~]",
             r"\.\./",
             r"\$\{.*\}",
             r"`.*`",
@@ -96,6 +96,16 @@ class SecureSubprocessExecutor:
             r"<\s*/",
         ]
 
+        # Git reference patterns that should be allowed despite containing special chars
+        self.allowed_git_patterns = [
+            r"^@\{u\}\.\.HEAD$",  # upstream..HEAD
+            r"^@\{upstream\}\.\.HEAD$",  # upstream..HEAD (long form)
+            r"^HEAD\.\.@\{u\}$",  # HEAD..upstream
+            r"^HEAD\.\.@\{upstream\}$",  # HEAD..upstream (long form)
+            r"^@\{[0-9]+\}$",  # reflog references like @{1}
+            r"^@\{[0-9]+ (minute|hour|day|week|month|year)s? ago\}$",  # time references
+        ]
+
         self.dangerous_env_vars = {
             "LD_PRELOAD",
             "DYLD_INSERT_LIBRARIES",
@@ -316,6 +326,12 @@ class SecureSubprocessExecutor:
         return validated_command, issues
 
     def _has_dangerous_patterns(self, arg: str, index: int, issues: list[str]) -> bool:
+        # First check if this is an allowed git pattern
+        for git_pattern in self.allowed_git_patterns:
+            if re.match(git_pattern, arg):
+                return False  # It's an allowed git pattern, don't flag as dangerous
+
+        # Check for dangerous patterns
         for pattern in self.dangerous_patterns:
             if re.search(pattern, arg):
                 issues.append(

{crackerjack-0.33.5.dist-info → crackerjack-0.33.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crackerjack
-Version: 0.33.5
+Version: 0.33.7
 Summary: Crackerjack Python project management tool
 Project-URL: documentation, https://github.com/lesleslie/crackerjack
 Project-URL: homepage, https://github.com/lesleslie/crackerjack

{crackerjack-0.33.5.dist-info → crackerjack-0.33.7.dist-info}/RECORD

@@ -199,7 +199,7 @@ crackerjack/services/regex_patterns.py,sha256=iis9gSzXZtnX14lODGfSUsf7bcCRTw7rdS
 crackerjack/services/regex_utils.py,sha256=e7AD59_L-T5-oOxzqsGgrLd94uxRE9aKnwasZkohwI8,14966
 crackerjack/services/secure_path_utils.py,sha256=aHsLwxDch42DidPYtTL_ko40g2rhbXDLnRhcx2LlGk8,16688
 crackerjack/services/secure_status_formatter.py,sha256=yhwNtzvvQVcuHsNOTNZMzlqIMQT9zx-lzAtq9LuSDuk,14121
-crackerjack/services/secure_subprocess.py,sha256=UAXyRgus-PJ4nOfSq9m_Ji8xmni4Hyl7uHmPsJwoQrQ,17308
+crackerjack/services/secure_subprocess.py,sha256=iGXdIUjYZ_ocxwo8OJSmOFJvdmOFXSvluNNgJvU3hFQ,18114
 crackerjack/services/security.py,sha256=plgIz-B8oYN_mpF4NYrqHnT7TRcsp4jr0-YlV9WgD5o,7298
 crackerjack/services/security_logger.py,sha256=_hQUQZekiafpIKyULgVxrQHrwPpTKv89jNf-XWqaAhg,16780
 crackerjack/services/server_manager.py,sha256=IQ0oUFEEMZTxI8csecIJzkCSMESE5KIkYqPxa56tvUw,11399
@@ -222,8 +222,8 @@ crackerjack/slash_commands/status.md,sha256=U3qqppVLtIIm2lEiMYaKagaHYLI9UplL7OH1
 crackerjack/tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 crackerjack/tools/validate_input_validator_patterns.py,sha256=NN7smYlXWrHLQXTb-81gRam2vjW-cJav92f1klPA0qA,8234
 crackerjack/tools/validate_regex_patterns.py,sha256=y2pAp2BzfSC_3XYMIKGMpQFwwwDidPy3k2Y2almOy74,5811
-crackerjack-0.33.5.dist-info/METADATA,sha256=fiWKF7JjyVGqGGtVk2v-JvYCJh1rbCk6bzzMMgt7RzY,37942
-crackerjack-0.33.5.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-crackerjack-0.33.5.dist-info/entry_points.txt,sha256=AJKNft0WXm9xoGUJ3Trl-iXHOWxRAYbagQiza3AILr4,57
-crackerjack-0.33.5.dist-info/licenses/LICENSE,sha256=fDt371P6_6sCu7RyqiZH_AhT1LdN3sN1zjBtqEhDYCk,1531
-crackerjack-0.33.5.dist-info/RECORD,,
+crackerjack-0.33.7.dist-info/METADATA,sha256=X0D9FDvXqelaJi-6QudA6DoXlK07W2N-AcFiSJwDXAI,37942
+crackerjack-0.33.7.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+crackerjack-0.33.7.dist-info/entry_points.txt,sha256=AJKNft0WXm9xoGUJ3Trl-iXHOWxRAYbagQiza3AILr4,57
+crackerjack-0.33.7.dist-info/licenses/LICENSE,sha256=fDt371P6_6sCu7RyqiZH_AhT1LdN3sN1zjBtqEhDYCk,1531
+crackerjack-0.33.7.dist-info/RECORD,,