Elgato_dark/gemini-cli
1
0
Fork 0
mirror of https://github.com/google-gemini/gemini-cli synced 2026-04-21 13:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 19

fix(cli): stricter path validation to only permit safe characters

Browse source 
permitted characters: alphanumeric characters, hyphens, and underscores
This commit is contained in:
Amaan Bilwar 2026-04-09 16:54:02 +05:30
parent 9492422f28
commit 1ab411addd
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
packages/cli/src/config/config.ts
View file

@ -255,8 +255,8 @@ export async function parseArguments(
return 'The --session-id flag requires a non-empty value';
}
if (trimmedSessionId === '.' || trimmedSessionId === '..') {
return 'Invalid --session-id value. "." and ".." are not allowed.';
if (!/^[a-zA-Z0-9_-]+$/.test(trimmedSessionId)) {
return 'Invalid --session-id value. Only alphanumeric characters, hyphens, and underscores are allowed.';
}
argv['sessionId'] = trimmedSessionId;
}