Skip to content

Stop using the shell to run commands - #320

Open
myyk wants to merge 2 commits into
cocktailpeanut:mainfrom
myyk:fix-rce
Open

Stop using the shell to run commands#320
myyk wants to merge 2 commits into
cocktailpeanut:mainfrom
myyk:fix-rce

Conversation

@myyk

@myyk myyk commented Mar 29, 2023

Copy link
Copy Markdown

This prevents RCE with $(...) syntax, and makes the regex escaping functions unnecessary, and the code slightly cleaner.

Fixes #287

Manually tested on Ubuntu running locally.

Setup:
image

Before:
image

After:
image

hhhhhhhhhn and others added 2 commits March 29, 2023 16:36
This prevents RCE with $(...) syntax, and makes the regex escaping
functions unnecessary, and the code slightly cleaner.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remote Code Execution in the text box of Dalai

2 participants