Roo-Code/packages/types
Roo Code d9a172d2ed fix: harden task permissions - anchor regex patterns, validate at schema level, simplify validation code
1. Anchor regex patterns in matchesAnyPattern with ^(?:...)$ wrapping so
   patterns like "src/.*" require full-path matching instead of substring
   matching. Prevents "evil/src/foo" from matching a "src/.*" permission.

2. Add regex validation at schema level (regexString refinement) so
   invalid patterns are rejected at parse time rather than silently
   failing at runtime.

3. Simplify duplicate file/command pattern validation in validateToolUse
   by unifying layered and flat code paths into a single branch that
   falls back to wrapping flat patterns as a single layer.

4. Remove unused matchesAnyPattern import from validateToolUse.ts.

5. Add tests for anchoring behavior, pre-anchored patterns, and
   invalid regex rejection at schema level.
2026-05-12 06:04:41 +00:00
..
npm Release: v1.115.0 (#11833) 2026-03-02 13:35:52 -08:00
scripts feat: add correct JSON schema for .roomodes configuration files (#11791) 2026-04-08 16:37:14 -06:00
src fix: harden task permissions - anchor regex patterns, validate at schema level, simplify validation code 2026-05-12 06:04:41 +00:00
.gitignore Task metadata (#7092) 2025-08-14 03:14:17 -07:00
CHANGELOG.md Changeset version bump (#12085) 2026-04-08 15:16:12 -06:00
eslint.config.mjs Task metadata (#7092) 2025-08-14 03:14:17 -07:00
package.json feat: add correct JSON schema for .roomodes configuration files (#11791) 2026-04-08 16:37:14 -06:00
tsconfig.json Task metadata (#7092) 2025-08-14 03:14:17 -07:00
tsup.config.ts Bump @roo-code/types to v1.42.0 (#6610) 2025-08-02 13:27:59 -07:00
vitest.config.ts Convert jest tests to vitest and disable default watch mode for vitest (#4568) 2025-06-11 14:48:01 -07:00