diff options
| author | Ulrich Müller <ulm@gentoo.org> | 2023-03-07 18:25:37 +0100 |
|---|---|---|
| committer | Ulrich Müller <ulm@gentoo.org> | 2023-03-07 18:25:37 +0100 |
| commit | 3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc (patch) | |
| tree | f4d2798e2e502999a8c06062bdda0f8498fa6afa /test/lisp/jsonrpc-tests.el | |
| parent | ab417c8a6eeb7df7ccce3e5f8416f48544a5174e (diff) | |
| download | emacs-3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc.tar.gz emacs-3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc.tar.bz2 emacs-3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc.zip | |
Fix Elisp code injection vulnerability in emacsclient-mail.desktop
A crafted mailto URI could contain unescaped double-quote
characters, allowing injection of Elisp code. Therefore, any
'\' and '"' characters are replaced by '\\' and '\"', using Bash
pattern substitution (which is not available in the POSIX shell).
We want to pass literal 'u=${1//\\/\\\\}; u=${u//\"/\\\"};' in the
bash -c command, but in the desktop entry '"', '$', and '\' must
be escaped as '\\"', '\\$', and '\\\\', respectively (backslashes
are expanded twice, see the Desktop Entry Specification).
Reported by Gabriel Corona <gabriel.corona@free.fr>.
* etc/emacsclient-mail.desktop (Exec): Escape backslash and
double-quote characters.
Diffstat (limited to 'test/lisp/jsonrpc-tests.el')
0 files changed, 0 insertions, 0 deletions