summaryrefslogtreecommitdiffstats
path: root/tdewallet/backend
diff options
context:
space:
mode:
authorSlávek Banko <[email protected]>2019-08-08 02:45:03 +0200
committerSlávek Banko <[email protected]>2019-08-09 02:31:54 +0200
commitb992188d7d47c248907fe0fbcc62c6bdfd79cc0c (patch)
tree42881a1b00ad1eac1aa864a8548405b9b149705e /tdewallet/backend
parent299fc401b139e105abb142c93a493065e8e8dcf1 (diff)
downloadtdelibs-b992188d7d47c248907fe0fbcc62c6bdfd79cc0c.tar.gz
tdelibs-b992188d7d47c248907fe0fbcc62c6bdfd79cc0c.zip
Security: remove support for $(...) in config keys with [$e] marker.
It is very unclear at this point what a valid use case for this feature would possibly be. The old documentation only mentions $(hostname) as an example, which can be done with $HOSTNAME instead. Note that $(...) is still supported in Exec lines of desktop files, this does not require [$e] anyway (and actually works better without it, otherwise the $ signs need to be doubled to obey tdeconfig $e escaping rules...). Based on KDE Frameworks 5 kconfig patch for CVE-2019-14744. This resolves issue #45. Signed-off-by: Slávek Banko <[email protected]> (cherry picked from commit 1074eb033654bd5462677ffe694eda7805390284)
Diffstat (limited to 'tdewallet/backend')
0 files changed, 0 insertions, 0 deletions