Skip to content

v0.16.0
Compare
Choose a tag to compare
@asmichi asmichi released this 28 Apr 15:58
· 22 commits to master since this release
v0.16.0
30b3a0c

To mitigate the "BatBadBut vulnerability," this release introduces a significant breaking change that restricts execution of cmd.exe.

For details, refer to the description of ChildProcessStartingBlockedException. For background information, refer to the document on the "BatBadBut vulnerability": https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/

Binary Breaking Changes

  • (Windows) Executing cmd.exe now requires ChildProcessFlags.DisableArgumentQuoting.
  • (Windows) Batch files (*.bat/*.cmd) can no longer be executed.
Assets 2
Loading