shellsafe

Documentation

Index

• func ArgContainsUnsafeMeta(arg string) bool
• func GitCommandReadOnly(argv []string) bool
• func SplitAndList(command string) ([]string, bool)
• func SplitPipeline(command string) ([]string, bool)
• func SplitSequence(command string) ([]string, bool)

Functions

func ArgContainsUnsafeMeta

func ArgContainsUnsafeMeta(arg string) bool

func GitCommandReadOnly

func GitCommandReadOnly(argv []string) bool

func SplitAndList

func SplitAndList(command string) ([]string, bool)

SplitAndList splits on `&&` only. `||` is intentionally not handled: its semantics are "run the right side if the left side fails", which makes it impossible to prove statically that all branches stay read-only. Callers that need to classify `||` chains as safe must do so explicitly.

func SplitPipeline

func SplitPipeline(command string) ([]string, bool)

func SplitSequence

func SplitSequence(command string) ([]string, bool)

SplitSequence splits on `;` only. It is intended for conservative static classification where every command in a sequential list must independently be safe.