Skip to content

V0.3.8

Choose a tag to compare

View all tags
@S4NKALP S4NKALP released this 28 Sep 08:19
· 8 commits to main since this release
0.3.8
This tag was signed with the committer’s verified signature.
S4NKALP Sankalp Tharu
GPG key ID: 112FEB1B00EDB7C8
Verified
Learn about vigilant mode.
8a3950c
This commit was signed with the committer’s verified signature.
S4NKALP Sankalp Tharu
GPG key ID: 112FEB1B00EDB7C8
Verified
Learn about vigilant mode.

What's Changed

Security: remove eval() from the template parser. Empty __builtins__ is not a sandbox, so a template expression could reach os.system. Expressions are now evaluated by an allow-list AST interpreter. See #71.

Also fixes app names missing from generated api/v1/urls.py and a wrong settings path in the generated pyproject.toml.

Full Changelog: 0.3.7...0.3.8

Assets 2
Loading