summaryrefslogtreecommitdiffstats
path: root/tdeui
diff options
context:
space:
mode:
authorSlávek Banko <slavek.banko@axis.cz>2019-08-08 02:45:03 +0200
committerSlávek Banko <slavek.banko@axis.cz>2019-08-08 03:15:54 +0200
commit1074eb033654bd5462677ffe694eda7805390284 (patch)
treec1e4a37007d39c7e2f82d912be55a4e587a8e7a4 /tdeui
parent38198900a49c5fe8cb9c7e9a9af9bba858e30f39 (diff)
downloadtdelibs-1074eb033654bd5462677ffe694eda7805390284.tar.gz
tdelibs-1074eb033654bd5462677ffe694eda7805390284.zip
Security: remove support for $(...) in config keys with [$e] marker.
It is very unclear at this point what a valid use case for this feature would possibly be. The old documentation only mentions $(hostname) as an example, which can be done with $HOSTNAME instead. Note that $(...) is still supported in Exec lines of desktop files, this does not require [$e] anyway (and actually works better without it, otherwise the $ signs need to be doubled to obey tdeconfig $e escaping rules...). Based on KDE Frameworks 5 kconfig patch for CVE-2019-14744. This resolves issue #45. Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
Diffstat (limited to 'tdeui')
0 files changed, 0 insertions, 0 deletions