1
0
mirror of https://gitea.quitesimple.org/crtxcr/cgitsb synced 2024-11-23 12:42:19 +01:00
cgitsb/filters
Jason A. Donenfeld 7ea35f9f8e syntax-highlighting.sh: Fix command injection.
By not quoting the argument, an attacker with the ability to add files
to the repository could pass arbitrary arguments to the highlight
command, in particular, the --plug-in argument which can lead to
arbitrary command execution.

This patch adds simple argument quoting.
2012-10-27 20:05:50 -06:00
..
commit-links.sh commit-links.sh: improve regular expressions 2011-07-19 07:12:02 +00:00
syntax-highlighting.sh syntax-highlighting.sh: Fix command injection. 2012-10-27 20:05:50 -06:00