Function build_proxy_command

crates/openshell-core/src/forward.rs:786–801

Build the SSH `ProxyCommand` string used to tunnel to a sandbox. Every interpolated argument is shell-escaped so that server-supplied values (gateway URL, sandbox id, token, gateway name) cannot inject shell metacharacters into the command that OpenSSH executes via `/bin/sh -c`.

(
    exe: &str,
    gateway_url: &str,
    sandbox_id: &str,
    token: &str,
    gateway_name: &str,
)

/// (gateway URL, sandbox id, token, gateway name) cannot inject shell
/// metacharacters into the command that OpenSSH executes via `/bin/sh -c`.
pub fn build_proxy_command(
    exe: &str,
    gateway_url: &str,
    sandbox_id: &str,
    token: &str,
    gateway_name: &str,
) -> String {
    format!(
        "{} ssh-proxy --gateway {} --sandbox-id {} --token {} --gateway-name {}",
        shell_escape(exe),
        shell_escape(gateway_url),
        shell_escape(sandbox_id),
        shell_escape(token),
        shell_escape(gateway_name),
    )
}

/// Error returned when a `CreateSshSessionResponse` fails validation.
///