1
>
/*---------------------------------------------------------------------------------------------
sshRemoteAgentHostHelpers.ts
2
>
* Copyright (c) Microsoft Corporation. All rights reserved.
3
>
* Licensed under the MIT License. See License.txt in the project root for license information.
4
>
*--------------------------------------------------------------------------------------------*/
5
>
6
>
import { ILogService } from '../../log/common/log.js';
7
>
import { createRemoteAgentHostState, parseRemoteAgentHostState } from '../common/remoteAgentHostMetadata.js';
8
>
9
>
const LOG_PREFIX = '[SSHRemoteAgentHost]';
10
>
11
>
/**
12
>
* Validate that a quality string is safe for bare interpolation in shell commands.
13
>
* Quality comes from `productService.quality` (not user input) but we validate
14
>
* as defense-in-depth since these values end up in unquoted shell paths (the `~`
15
>
* prefix requires shell expansion, so we cannot single-quote the entire path).
16
>
*/
17
>
export function validateShellToken(value: string, label: string): string {
18
if (!/^[a-zA-Z0-9._-]+$/.test(value)) {
19
throw new Error(`Unsafe ${label} value for shell interpolation: ${JSON.stringify(value)}`);