Security Feature request: Syntax for ascii glob additional to `:*`
Resolved 💬 3 comments Opened May 15, 2025 by gwpl Closed Jan 3, 2026
Currently :* glob in allowed tools can match anything.
Desired: ability to express sth like [a-zA-Z0-9_-] (maybe with double colon notation? :[...] or :alnum: :alpha etc like in unix tr command (check man tr) ?)
Context:
We know that it maybe tricky with utf-8 characters or terminal control codes injected that may affect how terminal will display things (and consequently applications processing such payloads).
References:
- example attacks using terminal codes https://www.perplexity.ai/search/terminal-control-codes-as-atta-ibkgjJEDSBKuJiwktJyq_g
- invisible utf-8 payload attacks: https://www.perplexity.ai/search/hiding-other-data-with-invisib-Anezx1qJRLion.X_r_N4Wg
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗