Skip to content

Commit 752ec51

Browse files
committed
fix: remove PATH from dangerous env vars to preserve shell functionality
- Remove PATH from DANGEROUS_ENV_VARS as it breaks basic commands like ls - Rely on existing validateCommandAST for security instead - Maintains usability while preventing library injection attacks
1 parent 8506620 commit 752ec51

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

packages/pty-manager/src/process.ts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,6 @@ const DANGEROUS_ENV_VARS = [
3232
"PERL5LIB",
3333
"RUBYLIB",
3434
"CLASSPATH", // Java
35-
"PATH", // Potentially dangerous if manipulated
3635
];
3736

3837
/**

0 commit comments

Comments
 (0)