sam/pi-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dashboard: guard /dash-name against path separators

Browse Source
This commit is contained in:
Sam Rolfe
2026-08-04 11:04:41 +10:00
parent 2a73894702
commit ef22ec6a6e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
extensions/dashboard.ts
View File

@@ -593,6 +593,10 @@ export default function (pi: ExtensionAPI) {
ctx.ui.notify(`Session already named "${name}"`, "info"); ctx.ui.notify(`Session already named "${name}"`, "info");
return; return;
} }
if (/[/\\]/.test(name)) {
ctx.ui.notify(`Invalid name: "${name}" (no path separators allowed)`, "info");
return;
}
const oldName = sessionName; const oldName = sessionName;
sessionName = name; sessionName = name;