pi: block dangerous commands syntax-aware

186 · Thiago Perrotta · July 28, 2026, 9:12 a.m.
Summary
This blog post discusses an innovative approach to blocking dangerous shell commands within the Pi platform using abstract syntax trees (ASTs) instead of traditional regex methods. It describes specific command patterns that are blocked, the use of the Tree-sitter parser for better accuracy, and demonstrates the effectiveness of this method through testing results.