mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-10-06 14:07:50 +00:00
sed scripts are capable of doing file I/O and executing arbitrary
commands. The `--sandbox` option prevents this by rejecting sed commands
with such capabilities; it's good practice to use this whenever the sed
script is dynamically generated (e.g. if it involves a variable
expansion).
Also fixed an error in one sed script where `.*` had been placed outside
of the quoted string (and would therefore be subject to shell globbing),
presumably due to single-quotes having been changed to double-quotes at
some point in the past.
Signed-off-by: Daniel Hast <hast.daniel@protonmail.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| actions/check_cirrus_cron | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| filters.yaml | ||
| issue-labeler.yml | ||
| ISSUE_TEMPLATE.md | ||
| labeler.yml | ||
| PULL_REQUEST_TEMPLATE.md | ||
| renovate.json5 | ||