Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix security holes #19

Merged
merged 2 commits into from
May 8, 2018
Merged

Fix security holes #19

merged 2 commits into from
May 8, 2018

Conversation

cshaa
Copy link
Contributor

@cshaa cshaa commented May 7, 2018

Fixes #17, fixes #18. Also fixes errors with trailing backslash in strings. Makes expressions only see own properties of the data object (ie. you cannot return the toString function from an expression).

@joewalnes joewalnes merged commit 309f37f into joewalnes:master May 8, 2018
@joewalnes
Copy link
Owner

Wow nice find! Thanks!

@cshaa cshaa deleted the patch-quotes branch May 12, 2018 09:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security bug – unescaped quotes in symbol Security bug – unescaped function name
2 participants