Module shell_validators 

Candidate-rejection validators ported from guard_core/handlers/_suspatterns_shell_validators.py (spec 4.0.2).

A validator receives a candidate match plus the detection context and decides whether the match is a true injection; returning false rejects the candidate and lets the scan continue with later matches.

Constants

AMBIGUOUS_BACKTICK_INJECTION_CONTEXTS

Functions

brace_expansion_is_dangerous_command

_brace_expansion_is_dangerous_command: any comma-separated item is a word-shaped token containing a letter.

dollar_substitution_pair_is_injection

_dollar_substitution_pair_is_injection.

glob_wildcard_token_is_dangerous_command

_glob_wildcard_token_is_dangerous_command.

glued_backtick_pair_is_injection

_glued_backtick_pair_is_injection.

quote_splice_token_is_dangerous_command

_quote_splice_token_is_dangerous_command: >= 3 consecutive 1-char fragments when splitting the token on quote runs.