Function validate_search_path_arg

src/mcp/mcp.c:5043–5068

Validate shell-safe arguments for search. */ Search/grep paths and globs are ALWAYS single-quoted (POSIX sh) or * double-/single-quoted (Windows cmd/PowerShell) on the command line, which * neutralises '&' — a very common character in real paths (R&D, "Foo & Bar", * OneDrive). Accept '&' here while still rejecting every metacharacter that * could break out of the quoting (#272). */

 * OneDrive). Accept '&' here while still rejecting every metacharacter that
 * could break out of the quoting (#272). */
static bool validate_search_path_arg(const char *s) {
    if (!s) {
        return false;
    }
    for (const char *p = s; *p; p++) {
        switch (*p) {
        case '\'':
        case '"':
        case ';':
        case '|':
        case '$':
        case '`':
        case '<':
        case '>':
        case '\n':
        case '\r':
#ifndef _WIN32
        case '\\':
#endif
            return false;
        default:
            break;
        }
    }
    return true;
}

static bool validate_search_args(const char *root_path, const char *file_pattern) {
    if (!validate_search_path_arg(root_path)) {