Prevent terminal symlink traversal via recursive grep

2026-08-23 19:48:40 +02:00
parent 91d36a98e3
commit 2f4bff550e
2 changed files with 5 additions and 1 deletions
@@ -80,6 +80,8 @@ class AthenaTerminalTests(unittest.TestCase):
            self.module.validate_arguments("rg", ["--pre", "sh", "x"], self.workspace)
        with self.assertRaises(PermissionError):
            self.module.validate_arguments("find", ["."], self.workspace)
+        with self.assertRaises(ValueError):
+            self.module.validate_arguments("grep", ["-R", "Athena", "."], self.workspace)

    def test_validation_parses_without_execution(self):
        result = self.module.validate_source({"path": "valid.json", "kind": "auto"})