1 files changed, 17 insertions, 0 deletions
diff --git a/u/process/validate_identifier.ts b/u/process/validate_identifier.ts
new file mode 100644
index 0000000..ec8b77b
--- /dev/null
+++ b/u/process/validate_identifier.ts
@@ -0,0 +1,17 @@
+import { Either } from "./mod.ts";
+
+export const validateIdentifier = (token: string) => {
+  return (/^[a-zA-Z0-9_\-:. \/]+$/).test(token) && !token.includes("..");
+};
+
+// ensure {@param obj} is a Record<string, string> with stuff that won't
+// have the potential for shell injection, just to be super safe.
+export const validateExecutionEntries = (
+  obj: Record<string, unknown>,
+): Either<Array<[string, unknown]>, Record<string, string>> => {
+  const invalidEntries = Object.entries(obj).filter((e) =>
+    !e.every((x) => typeof x === "string" && validateIdentifier(x))
+  );
+  if (invalidEntries.length > 0) return Either.left(invalidEntries);
+  return Either.right(<Record<string, string>> obj);
+};