Function isCommandList

src/utils/bash/commands.ts:539–603

(command: string)

// Checks if this is just a list of commands
function isCommandList(command: string): boolean {
  // Generate unique placeholders for this parse to prevent injection attacks
  const placeholders = generatePlaceholders()

  // Extract heredocs before parsing - shell-quote parses << incorrectly
  const { processedCommand } = extractHeredocs(command)

  const parseResult = tryParseShellCommand(
    processedCommand
      .replaceAll('"', `"${placeholders.DOUBLE_QUOTE}`) // parse() strips out quotes :P
      .replaceAll("'", `'${placeholders.SINGLE_QUOTE}`), // parse() strips out quotes :P
    varName => `$${varName}`, // Preserve shell variables
  )

  // If parse failed, it's not a safe command list
  if (!parseResult.success) {
    return false
  }

  const parts = parseResult.tokens
  for (let i = 0; i < parts.length; i++) {
    const part = parts[i]
    const nextPart = parts[i + 1]
    if (part === undefined) {
      continue
    }

    if (typeof part === 'string') {
      // Strings are safe
      continue
    }
    if ('comment' in part) {
      // Don't trust comments, they can contain command injection
      return false
    }
    if ('op' in part) {
      if (part.op === 'glob') {
        // Globs are safe
        continue
      } else if (COMMAND_LIST_SEPARATORS.has(part.op)) {
        // Command list separators are safe
        continue
      } else if (part.op === '>&') {
        // Redirection to standard input/output/error file descriptors is safe
        if (
          nextPart !== undefined &&
          typeof nextPart === 'string' &&
          ALLOWED_FILE_DESCRIPTORS.has(nextPart.trim())
        ) {
          continue
        }
      } else if (part.op === '>') {
        // Output redirections are validated by pathValidation.ts
        continue
      } else if (part.op === '>>') {
        // Append redirections are validated by pathValidation.ts
        continue
      }