2
0
mirror of https://git.zx2c4.com/cgit/ synced 2024-11-13 19:12:05 +00:00
cgit/filters
Jason A. Donenfeld 7ea35f9f8e syntax-highlighting.sh: Fix command injection.
By not quoting the argument, an attacker with the ability to add files
to the repository could pass arbitrary arguments to the highlight
command, in particular, the --plug-in argument which can lead to
arbitrary command execution.

This patch adds simple argument quoting.
2012-10-27 20:05:50 -06:00
..
commit-links.sh commit-links.sh: improve regular expressions 2011-07-19 07:12:02 +00:00
syntax-highlighting.sh syntax-highlighting.sh: Fix command injection. 2012-10-27 20:05:50 -06:00