LunarTides/Hearthstone.js
1
1
Fork 0
Code Issues 50 Pull requests Projects Releases 19 Packages Wiki Activity Actions

Prevent eval commands from running in replay files #338

New issue
Closed
opened 2023-10-12 21:20:02 +00:00 by LunarTides · 0 comments
LunarTides commented 2023-10-12 21:20:02 +00:00 (Migrated from github.com)
Copy link

This is a very big security vulnerability

This is a very big security vulnerability
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
telescope
stable
v3.0.0
v2.0.0
v2.0.0-beta.8
v2.0.0-beta.7
v2.0.0-beta.6
v2.0.0-beta.5
v2.0.0-beta.4
v2.0.0-beta.3
v2.0.0-beta.2
v2.0.0-beta.1
v2.0.0-beta.0
v1.6.2
v1.6.1
v1.6.0
v1.5.1
v1.5.0
v0.1.0
v1.2.0
v1.3.0
v1.4.0
Labels
Clear labels   
breaking change
The issue requires a breaking change.

  
duplicate
This issue or pull request already exists

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
scope: card
The issue is related to 1 or more cards.

  
scope: docs
The issue is related to the docs website.

  
scope: game
The issue is related to the game itself

  
scope: registry
The issue is related to the registry.

  
scope: script
The issue is related to a script (DEPRECATED)

  
scope: tool
The issue is related to a tool

  
scope: universe
The issue is related to the universe.

  
tracker
This issue tracks multiple similar issues.

  
type: bug
Something isn't working

  
type: card request
The issue requests adding one or more cards.

  
type: documentation
Improvements or additions to documentation

  
type: enhancement
New feature or request

  
type: improvement
Improvement to an already existing feature

  
type: parity
Get closer parity with vanilla.

  
wontfix
This will not be worked on

No labels
breaking change
duplicate
good first issue
help wanted
invalid
question
scope: card
scope: docs
scope: game
scope: registry
scope: script
scope: tool
scope: universe
tracker
type: bug
type: card request
type: documentation
type: enhancement
type: improvement
type: parity
wontfix
Milestone
Clear milestone
No items
No milestone
2.0
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
LunarTides/Hearthstone.js#338
No description provided.