felixfoertsch/remind
1
0
Fork 0
mirror of https://salsa.debian.org/dskoll/remind.git synced 2026-04-17 14:59:20 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Disable shell() inside an eval("...") for safety.

Browse Source 
Based on email from Tim Chase.
This commit is contained in:
Dianne Skoll
2025-05-23 11:48:06 -04:00
parent af8c1630c3
commit 4c2b6031cd
5 changed files with 50 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
tests/test.rem
View File

@@ -1572,6 +1572,18 @@ set a eval("1 / / 2")
set a catch(eval("1 +"), 33)
set a catch(eval("1/0"), 34)
set a catch(eval("1 / / 2"), 35)
# Ensure RUN is disabled in eval
set a shell("echo foo")
set a eval("shell(\"echo foo\")")
set a shell("echo foo")
FSET i() shell("echo foo")
set a i()
set a eval("i()")
set a i()
FUNSET i
DEBUG -x
DEBUG -e