{"version":"2.1.257","anchor":"sandboxed-grepawk-argument-allowlisting","canonical_anchor":"sandboxed-grepawk-argument-allowlisting","heading":"Sandboxed grep\/awk argument allowlisting","tier":"internal","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/sandboxed-grepawk-argument-allowlisting","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### Sandboxed grep\/awk argument allowlisting\n\nNew parsers pull file-path operands out of grep and awk arguments so they can be allowlisted for the sandbox.\n\nNew helper functions parse `grep` and `awk` command-line arguments to extract path-like operands for sandboxing, recognizing flags such as `-e`\/`--regexp` and `-A`\/`--after-context` for `grep`, and `-F`\/`--field-separator`, `-f`\/`--file`, `-E`\/`--exec` for `awk`. This distinguishes which arguments are file paths versus regex or script content, supporting path-allowlisting tied to the `sandbox.ripgrep` managed setting.\n\n- Area: Sandbox\n- Names: `sandbox.ripgrep`\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}