extend bracket-scan regex to match [::exec ls] so namespace-qualified commands are not exempt

Author: kartikloops

typescript/__tests__/config/command_whitelist.test.ts

@@ -218,6 +218,10 @@ describe("isQueryCommand", () => {
     expect(isQueryCommand("set x [exec ls]")).toEqual([false, "exec"]);
   });
 
+  it("bracket: blocks set x [::exec ls] with namespace-qualified command", () => {
+    expect(isQueryCommand("set x [::exec ls]")).toEqual([false, "exec"]);
+  });
+
   it("bracket: blocks expr {[exec ls]} via bracket scan (finding 2)", () => {
     expect(isQueryCommand("expr {[exec ls]}")).toEqual([false, "exec"]);
   });

typescript/src/config/command_whitelist.ts

@@ -210,7 +210,7 @@ function* iterVerbs(command: string): Generator<string> {
       yield verb;
     }
   }
-  for (const match of command.matchAll(/\[(\w+)/g)) {
+  for (const match of command.matchAll(/\[\s*(?::+)?(\w+)/g)) {
     yield match[1]!;
   }
 }