Nuova release 2.2.1 che contiene le seguenti fix di sicurezza.
Fixed
- CWE-23: Relative Path Traversal
- CWE-643: Improper Neutralization of Data within XPath Expressions ('XPath Injection')
- CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
- SC2086: Double quote to prevent globbing and word splitting
- SC2129: Consider using { cmd1; cmd2; } >> file instead of individual redirects
What's Changed
Full Changelog: v2.2.0...v2.2.1
Contributors
amusarra