Roo-Code/webview-ui/src
hannesrudolph d2a0390f5d fix: improve command pattern extraction security
- Fix npm/yarn/pnpm commands with additional arguments to avoid overly broad wildcards
- Improve handling of chained commands with proper quote-aware parsing
- Add security limits for deeply nested command chains
- Enhance detection of command injection patterns
- Update tests to reflect more secure pattern extraction behavior

This addresses the critical security issue where commands like 'npm run build:prod -- --env=production' were creating patterns that were too permissive.
2025-07-07 12:54:04 -06:00
..
__tests__ fix: standardize tooltip delays to 300ms (#5090) (#5098) 2025-06-26 15:41:32 -04:00
components feat: add 'Add and Run' button for allowed commands (#5290) 2025-07-07 12:54:04 -06:00
context add todo tool (#5182) 2025-07-07 14:07:39 -04:00
hooks feat: Add indexing status badge to chat view (#4429) (#4532) 2025-06-12 21:56:57 -04:00
i18n feat: add 'Add and Run' button for allowed commands (#5290) 2025-07-07 12:54:04 -06:00
lib Add shadcn/ui + Storybook 2025-01-30 12:50:09 -08:00
oauth Add a new @roo-code/types package and use it everywhere (#3912) 2025-05-26 12:06:45 -07:00
utils fix: improve command pattern extraction security 2025-07-07 12:54:04 -06:00
App.tsx fix: standardize tooltip delays to 300ms (#5090) (#5098) 2025-06-26 15:41:32 -04:00
index.css feature: add toggle for disable mcp server tool from prompt (#3551) 2025-06-20 19:14:59 -04:00
index.tsx PNPM + Turbo monorepo + Nightly releases (#3407) 2025-05-21 21:01:20 -07:00
preflight.css Bring most of Tailwind's preflight.css back 2025-02-03 12:18:28 -08:00
types.d.ts Welcome page OAuth (#1913) 2025-03-23 10:08:16 -04:00
vite-env.d.ts Remove lucide 2025-01-30 14:47:59 -08:00