New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIX: pandoc security issue #1790

Merged

jackycute merged 1 commit into hackmdio:develop from galaxian85:bugfix/pandoc-security-issue

Mar 9, 2023

Contributor

galaxian85 commented Jan 7, 2023

According to pandoc's manual
some file format can include or embed files on the file system.

Check param exportType is valid & running pandoc with --sandbox to fix this.


fix: restrict export type and use sandbox to prevent potential attack

5d72fae

Signed-off-by: Charlie Hsieh <[email protected]>

galaxian85 force-pushed the bugfix/pandoc-security-issue branch from 4a6eb67 to 5d72fae Compare

January 10, 2023 02:42

jackycute requested a review from Yukaii

January 13, 2023 09:11

Member

jackycute commented Mar 9, 2023

Thanks @galaxian85

jackycute merged commit b09a472 into hackmdio:develop

stanley2058 mentioned this pull request

Release 2.5.0 #1835

Merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment