Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

BREAKING CHANGE: limit syntax for bracketed lookup strings to fix vuln #145

Merged
merged 6 commits into from Aug 28, 2020
Merged

BREAKING CHANGE: limit syntax for bracketed lookup strings to fix vuln #145

merged 6 commits into from Aug 28, 2020

Commits on Aug 23, 2020

  1. BREAKING CHANGE: limit syntax for bracketed lookup strings to fix vuln 

    This restricts the supported syntax for *bracketed* parts of lookup
strings to avoid the need to *eval* that string. The eval is a
security vulnerability that allows command injection.

Fixes #144
    @trentm
    trentm committed Aug 23, 2020
    Copy the full SHA
    48169ce View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2020

  1. fix 'make check'

    @trentm
    trentm committed Aug 28, 2020
    Copy the full SHA
    ce6d037 View commit details
    Browse the repository at this point in the history

  2. fix 'make check-version'

    @trentm
    trentm committed Aug 28, 2020
    Copy the full SHA
    1ec5e47 View commit details
    Browse the repository at this point in the history

  3. better changelog

    @trentm
    trentm committed Aug 28, 2020
    Copy the full SHA
    52731bc View commit details
    Browse the repository at this point in the history

  4. improve error handling and add a test case

    @trentm
    trentm committed Aug 28, 2020
    Copy the full SHA
    2f04d36 View commit details
    Browse the repository at this point in the history

  5. changelog reflow and typos/tweaks

    @trentm
    trentm committed Aug 28, 2020
    Copy the full SHA
    639eb07 View commit details
    Browse the repository at this point in the history