fix: more accurate deny pattern for disk wiping

2026-06-12 18:08:54 +00:00 · 2026-03-25 10:14:16 +08:00
parent cf9e0496f7
commit ae021ef843
1 changed files with 1 additions and 1 deletions
@@ -35,7 +35,7 @@ var (
 		regexp.MustCompile(`\brmdir\s+/s\b`),
 		// Match disk wiping commands (must be followed by space/args)
 		regexp.MustCompile(
-			`\b(format|mkfs|diskpart)\b\s`,
+			`(^|[^-\w])\b(format|mkfs|diskpart)\b\s`,
 		),
 		regexp.MustCompile(`\bdd\s+if=`),
 		// Block writes to block devices (all common naming schemes).