Merge pull request #168 from boostcampwm2023/feature-be-#167

[BE]feat#167 파이프, 세미콜론, 부등호 등의 커맨드 체이닝을 방지한다
boostcampwm2023 · Nov 28, 2023 · af8dfae · af8dfae
2 parents f577995 + 5e92fce
commit af8dfae
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/packages/backend/src/command.guard.ts → packages/backend/src/common/command.guard.ts b/packages/backend/src/command.guard.ts → packages/backend/src/common/command.guard.ts
@@ -9,7 +9,13 @@ export class CommandGuard implements CanActivate {
     return (
       typeof mode === 'string' &&
       typeof message === 'string' &&
-      (mode === 'editor' || (mode === 'command' && message.startsWith('git')))
+      (mode === 'editor' ||
+        (mode === 'command' &&
+          message.startsWith('git') &&
+          !this.isMessageIncluded(message, [';', '>', '|', '<'])))
     );
   }
+  private isMessageIncluded(message: string, keywords: string[]): boolean {
+    return keywords.some((keyword) => message.includes(keyword));
+  }
 }
diff --git a/packages/backend/src/quizzes/quizzes.controller.ts b/packages/backend/src/quizzes/quizzes.controller.ts
@@ -29,7 +29,7 @@ import { Response } from 'express';
 import { ContainersService } from '../containers/containers.service';
 import { SessionId } from '../session/session.decorator';
 import { SessionGuard } from '../session/session.guard';
-import { CommandGuard } from '../command.guard';
+import { CommandGuard } from '../common/command.guard';
 import { QuizWizardService } from '../quiz-wizard/quiz-wizard.service';
 import { Fail, SubmitDto, Success } from './dto/submit.dto';