Update app.py

app.py

@@ -6,6 +6,10 @@ import shutil
 import sys
 import google.generativeai as genai
 
+def sanitize_command(command):
+    """Sanitize the command to prevent shell injection."""
+    return command.replace(";", "").replace("&&", "").replace("||", "")
+
 app = Flask(__name__)
 
 # Create a temporary directory for operations
@@ -61,8 +65,9 @@ chat = model.start_chat(history=[])
 
 def execute_command(command, cwd=None):
     """Executes a command and returns the output."""
+    sanitized_command = sanitize_command(command)
     process = subprocess.Popen(
-        command,
+        sanitized_command,
         shell=True,
         stdout=subprocess.PIPE,
         stderr=subprocess.PIPE,
@@ -109,13 +114,15 @@ def execute_code():
                 with open(filepath, 'w') as f:
                     f.write(content)
                 result = f"File {filename} created and edited successfully."
-            elif ai_result.startswith("!"):
+            elif ai_result.startswith("!python"):
                 result = execute_command(ai_result[1:])  # Remove the leading '!'
+            elif ai_result.startswith("git clone"):
+                result = execute_command(ai_result)
             elif ai_result.startswith("show files"):
                 files = os.listdir(current_dir)
                 result = "Files in current directory:\n" + "\n".join(files)
             else:
-                result = execute_command(ai_result)
+                result = f"Unclear AI response: {ai_result}"
 
             return jsonify({"result": f"AI Executed: {ai_result}\n\nOutput:\n{result}"})
         elif command == "show files":