From 79d7c139c9bc5d28959b4a8101285f77a5ca1d14 Mon Sep 17 00:00:00 2001 From: yumoqing Date: Wed, 5 Aug 2026 15:42:03 +0800 Subject: [PATCH] =?UTF-8?q?security:=20rm=20-rf=20=E5=8C=B9=E9=85=8D?= =?UTF-8?q?=E6=B3=9B=E5=8C=96=E2=80=94=E2=80=94=E8=A6=86=E7=9B=96=E6=97=A0?= =?UTF-8?q?=E7=A9=BA=E6=A0=BC=E8=BF=9E=E5=86=99=E5=8F=98=E4=BD=93=EF=BC=88?= =?UTF-8?q?=E5=A6=82=20rm=20-rf=E5=88=A0=E9=99=A4=EF=BC=89?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- wwwroot/api/cockpit_chat.dspy | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wwwroot/api/cockpit_chat.dspy b/wwwroot/api/cockpit_chat.dspy index bdadb8d..b3ea498 100644 --- a/wwwroot/api/cockpit_chat.dspy +++ b/wwwroot/api/cockpit_chat.dspy @@ -508,7 +508,7 @@ async def _route_pending_questions(sor, model_info, ctx, settings): SECURITY_RULES = [ (('drop table', 'drop database', 'truncate table', 'truncate ', '删库', '清空数据库', '清空所有表'), '包含直接删表/清库的破坏性SQL，此类操作必须走变更审批流程，Agent拒绝执行。'), - (('rm -rf /', 'rm -rf ~', 'rm -rf /*', 'mkfs', 'dd if=', '格式化磁盘'), + (('rm -rf', 'mkfs', 'dd if=', '格式化磁盘'), '包含可能破坏文件系统的危险命令，Agent拒绝执行。'), (('忽略之前的', '忽略上面所有', '忽略一切指令', '无视之前的', 'ignore previous', 'ignore all instructions', 'ignore everything above', '进入开发者模式', 'dan模式'), '检测到提示注入企图（试图覆盖系统指令），Agent拒绝执行。'),