mirror of
https://github.com/affaan-m/ECC.git
synced 2026-09-22 09:35:10 +02:00
fix: resolve nested PowerShell command tokens
This commit is contained in:
@@ -470,6 +470,7 @@ test('classifies static execution primitives', () => {
|
||||
"$payload = 'Remove-Item -Force C:/tmp/demo'; pwsh -Command \"Write-Output ready; $payload\"",
|
||||
"$payload = 'Remove-Item -Force C:/tmp/demo'; pwsh -Command \"Write-Output ready; $($payload)\"",
|
||||
"$payload = 'Remove-Item -Force C:/tmp/demo'; pwsh -Command:$payload",
|
||||
"$payload = 'Remove-Item'; pwsh -Command $payload -Force C:/tmp/demo",
|
||||
"$payload = \"Remove-Item `\n-Force C:/tmp/demo\"; pwsh -Command $payload",
|
||||
]) {
|
||||
expectRules(command, [RULES.REMOVE_FORCE]);
|
||||
@@ -482,6 +483,9 @@ test('classifies static execution primitives', () => {
|
||||
expectRules('pwsh -Command "Write-Output ready; $($runtimeValue)"', [
|
||||
RULES.DYNAMIC_EXECUTION,
|
||||
]);
|
||||
expectRules('pwsh -Command $runtimeValue -Force C:/tmp/demo', [
|
||||
RULES.DYNAMIC_EXECUTION,
|
||||
]);
|
||||
expectSafe("$payload = 'Remove-Item -Force C:/tmp/demo'; pwsh -Command '$payload'");
|
||||
expectSafe("$payload = 'Remove-Item -Force C:/tmp/demo'; pwsh -Command \"Write-Output `$payload\"");
|
||||
expectSafe("$payload = 'Remove-Item -Force C:/tmp/demo'; pwsh -Command:`$payload");
|
||||
|
||||
Reference in New Issue
Block a user