Implement fix for build scripts in output directories

Author: smoelius

src/config.rs

@@ -58,18 +58,11 @@ fn extend_from_string_array(vec: &mut Vec<String>, value: Option<&toml::Value>)
     }
 }
 
-pub fn allowed() -> bool {
-    directory_allowed() || package_allowed()
+pub fn directory_allowed(path: &Path) -> bool {
+    CONFIG.directories.iter().any(|d| path.starts_with(d))
 }
 
-pub fn directory_allowed() -> bool {
-    let Ok(cwd) = env::current_dir() else {
-        return false;
-    };
-    CONFIG.directories.iter().any(|d| cwd.starts_with(d))
-}
-
-fn package_allowed() -> bool {
+pub fn package_allowed() -> bool {
     let Ok(name) = env::var("CARGO_PKG_NAME") else {
         return false;
     };

src/linking.rs

@@ -21,7 +21,8 @@ pub fn link(args: &[String]) -> Result<()> {
         && var_os("RUSTC_WORKSPACE_WRAPPER").is_none()
         && let Some(path) = output_path(args.iter())
         && is_build_script(&path)
-        && !config::allowed()
+        && !config::directory_allowed(&path)
+        && !config::package_allowed()
     {
         wrap(&linker, &path)?;
     }

src/main.rs

@@ -2,7 +2,7 @@ use anyhow::{Context, Result, bail};
 use regex::Regex;
 use std::{
     collections::BTreeMap,
-    env::{args, current_exe},
+    env::{args, current_dir, current_exe},
     fs::read_to_string,
     io::{IsTerminal, stdout},
     path::Path,
@@ -87,7 +87,7 @@ A linker replacement to help protect against malicious build scripts
     let result = enabled();
     if matches!(result, Ok(true)) {
         let enabled = *ENABLED;
-        if config::directory_allowed() {
+        if current_dir().is_ok_and(|cwd| config::directory_allowed(&cwd)) {
             let disabled = *DISABLED_YELLOW;
             println!("build-wrap is {enabled} (but {disabled} in this directory)");
         } else {