Jason A. Donenfeld 7ea35f9f8e syntax-highlighting.sh: Fix command injection. ...

By not quoting the argument, an attacker with the ability to add files
to the repository could pass arbitrary arguments to the highlight
command, in particular, the --plug-in argument which can lead to
arbitrary command execution.

This patch adds simple argument quoting.

2012-10-27 20:05:50 -06:00

..

commit-links.sh

commit-links.sh: improve regular expressions

2011-07-19 07:12:02 +00:00

syntax-highlighting.sh

syntax-highlighting.sh: Fix command injection.

2012-10-27 20:05:50 -06:00