Constants§
- SHELL_
SPAWNING_ COMMANDS - Commands that can execute arbitrary code passed as a string argument.
Functions§
- assert_
single_ statement - Validate that
commandis a single top-level bash statement. - detect_
allowlist_ bypass - Return the deduplicated allowlist entries that make a
code_writerallowlist bypassable (seeSHELL_SPAWNING_COMMANDS). - extract_
command_ texts - Collect the full text of every
commandnode in the script.