(path: string)
| 121 | const ALLOWED_SYSTEM_PATHS = ['/usr/bin/ldd']; |
| 122 | |
| 123 | function isSuspiciousPath(path: string): boolean { |
| 124 | if (ALLOWED_SYSTEM_PATHS.includes(path)) return false; |
| 125 | return !VALID_PATH_PREFIXES.some(prefix => path.startsWith(prefix)); |
| 126 | } |
| 127 | |
| 128 | /** |
| 129 | * Parse a colon-separated list of compiler/group references. |