Validate allowed commands for whole command chain

[bakua]

If auto approve command execution is enabled and 'npm test' is allowed, will the system automatically allow 'npm test | rm -rf .' command?

If yes then each command from the chain should be validated against the whitelist.

[mrubens]

I believe it is - is that not working?

[bakua]

I don't know. I asked GitHub copilot on the GitHub roocode repo page and after analyzing files it said such validation isn't present.

[mrubens]

https://github.com/RooVetGit/Roo-Code/blob/main/webview-ui/src/utils/command-validation.ts#L5-L14

Actually seems like we have a test for your exact example! https://github.com/RooVetGit/Roo-Code/blob/105bc3c0d5a00583627356fe7b02f70d050e08af/webview-ui/src/utils/__tests__/command-validation.test.ts#L80

[bakua]

Beautiful. Thank you, now I'll sleep well.