Roo-Code/packages
Roo Code 311a2bdfb4 fix: harden task permissions - anchor regex patterns, validate at schema level, simplify validation code
1. Anchor regex patterns in matchesAnyPattern with ^(?:...)$ wrapping so
   patterns like "src/.*" require full-path matching instead of substring
   matching. Prevents "evil/src/foo" from matching a "src/.*" permission.

2. Add regex validation at schema level (regexString refinement) so
   invalid patterns are rejected at parse time rather than silently
   failing at runtime.

3. Simplify duplicate file/command pattern validation in validateToolUse
   by unifying layered and flat code paths into a single branch that
   falls back to wrapping flat patterns as a single layer.

4. Remove unused matchesAnyPattern import from validateToolUse.ts.

5. Add tests for anchoring behavior, pre-anchored patterns, and
   invalid regex rejection at schema level.
2026-05-12 14:37:29 +00:00
..
build fix: add retry logic to copyDir/copyPaths for EBUSY errors on Windows 2026-05-12 14:29:28 +00:00
cloud Remove all telemetry (#12324) 2026-05-11 17:34:58 -04:00
config-eslint Upgrade to ESLint 9 + share eslint config across workspaces (#3815) 2025-05-21 21:30:21 -07:00
config-typescript Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00
core Changeset version bump (#12085) 2026-04-08 15:16:12 -06:00
evals Remove all telemetry (#12324) 2026-05-11 17:34:58 -04:00
ipc Changeset version bump (#12085) 2026-04-08 15:16:12 -06:00
types fix: harden task permissions - anchor regex patterns, validate at schema level, simplify validation code 2026-05-12 14:37:29 +00:00
vscode-shim Some cleanup in ExtensionHost (#10600) 2026-01-10 02:29:33 -08:00