From 4efcfbb6ee9915997509f15b1b2fea7ecda68cd5 Mon Sep 17 00:00:00 2001 From: anupamme Date: Thu, 30 Jul 2026 08:02:07 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- s03_permission/code.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/s03_permission/code.py b/s03_permission/code.py index f9e785e8d..31a0f9f0a 100644 --- a/s03_permission/code.py +++ b/s03_permission/code.py @@ -142,8 +142,9 @@ def run_glob(pattern: str) -> str: DENY_LIST = ["rm -rf /", "sudo", "shutdown", "reboot", "mkfs", "dd if=", "> /dev/sda"] def check_deny_list(command: str) -> str | None: + normalized = " ".join(command.lower().split()) for pattern in DENY_LIST: - if pattern in command: + if pattern.lower() in normalized: return f"Blocked: '{pattern}' is on the deny list" return None