findUnresolvableSites
findUnresolvableSites(
command):UntrustedSite[]
Defined in: packages/core/src/core/shell/framing.ts:346
Every position in command at which the gate could not statically resolve it: each command
substitution ($( and a backtick) and each composition boundary (;, &&, ||, |).
Deliberately not quote-aware. A shell-accurate scanner would skip a $( inside single quotes
— and the command that motivated this whole surface hid its payload in backticks inside double
quotes, where the shell expands it. Over-reporting costs a line of notice; under-reporting is the
incident. The scan is the same order of simplicity as the ambiguity preflight that actually caught
that command, and for the same reason.
Scanned over the neutralised lines so the reported line and column are the ones the reader can count to on the screen.
Parameters
Section titled “Parameters”command
Section titled “command”string