KTeam/ktworkflow-mcp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 补强NapCat审计Windows路径拒绝

Browse Source
This commit is contained in:
sunlei 2026-06-25 00:30:20 +08:00
parent 7619dd5928
commit 99408d3cec
2 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/selfTest.ts
View File

@ -182,6 +182,18 @@ export async function runSelfTest(): Promise<void> {
"\\\\server\\share\\packages\\napcat-core\\login\\runtime.ts",
],
},
{
forkPatchFiles: [],
name: "Windows rooted path",
upstreamChangedFiles: [
"\\packages\\napcat-core\\login\\runtime.ts",
],
},
{
forkPatchFiles: [],
name: "Windows drive-relative path",
upstreamChangedFiles: ["C:packages/napcat-core/login/runtime.ts"],
},
{
forkPatchFiles: [],
name: "parent segment path",

4
src/tools/napcatAutomation.ts
View File

@ -83,9 +83,9 @@ const hotZoneMatchers: Array<{ pattern: string; regex: RegExp }> = [
function hasInvalidAuditPath(value: string): boolean {
const trimmed = value.trim();
if (!trimmed) return false;
if (/^[a-zA-Z]:[\\/]/.test(trimmed)) return true;
if (/^[a-zA-Z]:/.test(trimmed)) return true;
if (trimmed.startsWith('\\\\') || trimmed.startsWith('//')) return true;
if (trimmed.startsWith('/')) return true;
if (trimmed.startsWith('\\') || trimmed.startsWith('/')) return true;
const normalized = trimmed
.replace(/\\/g, '/')