Skip to content

v0.14.8

Choose a tag to compare

View all tags
@batrapulkit batrapulkit released this 26 Oct 16:57
· 116 commits to main since this release
v0.14.8
b449db3

Fix: two ways round reported by Kaustubh

  • A download inside a subshell is held: (curl -s URL > x.sh) && bash x.sh. Commands in ( ... ) and { ...; } are read like any other.
  • Python, Node, Ruby, Perl and PHP scripts are read for the commands they hand to a shell when written out (os.system("..."), subprocess.run("..." or [...]), execSync("..."), backticks). python3 evil.py running curl URL | sh is held; python tool.py running pytest still runs. A command a script builds at run time still can't be read in advance (THREAT_MODEL.md).

Reported bypasses: 42 of 42 stopped. Nothing to configure. Upgrade: run the install line again, or pipx upgrade squidbrake.

Install this version (0.14.8)

Windows (PowerShell):

$env:SQUIDBRAKE_VERSION="0.14.8"; irm https://pilots.squidbrake.com/install.ps1 | iex

macOS / Linux:

curl -fsSL https://pilots.squidbrake.com/install.sh | SQUIDBRAKE_VERSION=0.14.8 sh

With pip: pip install squidbrake==0.14.8. Docker: docker pull ghcr.io/batrapulkit/squidbrake:0.14.8

Running the line again without SQUIDBRAKE_VERSION goes back to the newest. Every version:
https://github.com/batrapulkit/squidbrake/releases

Assets 8
Loading