github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-25 12:18:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(macos): unify exec allowlist validation pipeline

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-21 23:09:03 +01:00
parent 61dc7ac679
commit 2028ca4428
6 changed files with 322 additions and 93 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
apps/macos/Sources/OpenClaw/ExecAllowlistMatcher.swift
View File

@@ -7,12 +7,12 @@ enum ExecAllowlistMatcher {
let resolvedPath = resolution.resolvedPath
for entry in entries {
let pattern = entry.pattern.trimmingCharacters(in: .whitespacesAndNewlines)
if pattern.isEmpty { continue }
let hasPath = pattern.contains("/") || pattern.contains("~") || pattern.contains("\\")
if hasPath {
switch ExecApprovalHelpers.validateAllowlistPattern(entry.pattern) {
case .valid(let pattern):
let target = resolvedPath ?? rawExecutable
if self.matches(pattern: pattern, target: target) { return entry }
case .invalid:
continue
}
}
return nil