Skip to content

Commit e0e8d76

Browse files
committed
fixed This does not escape backslash characters in the input
1 parent a464afd commit e0e8d76

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

src/core/security/SecurityGuard.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -787,6 +787,7 @@ ask:
787787
*/
788788
private patternToRegex(pattern: string): RegExp {
789789
const escaped = pattern
790+
.replace(/\\/g, "\\\\") // Escape backslashes FIRST
790791
.replace(/\./g, "\\.") // Escape dots
791792
.replace(/\*/g, ".*") // Convert * to .*
792793

@@ -868,6 +869,7 @@ ask:
868869
if (normalizedPattern.includes("*")) {
869870
// Convert glob pattern to regex
870871
const regexPattern = normalizedPattern
872+
.replace(/\\/g, "\\\\") // Escape backslashes FIRST
871873
.replace(/\./g, "\\.") // Escape dots
872874
.replace(/\*/g, ".*") // Convert * to .*
873875

0 commit comments

Comments
 (0)