Skip to content

v1.4.30

Choose a tag to compare

View all tags
@dominatos dominatos released this 12 Jun 15:24
· 19 commits to main since this release
v1.4.30
b7afddd
This commit was signed with the committer’s verified signature.
dominatos
SSH Key Fingerprint: pgr04I1SGZHkxgPkeF2/xEErXQ9OXDWQMlzO5rtbJRU
Verified
Learn about vigilant mode.

Security:

  • 🔒 Fix: Escaped user-controlled configuration values (cheatsDir, cacheFile) in the Plasma 6 widget's indexer command to prevent shell injection. Previously these values were interpolated with only double-quote wrapping, which does not prevent $() or backtick expansion. Now uses single-quote escaping via shared escapeShell() / bashSafePath() utilities added to cheats.js.

Full Changelog: https://github.com/dominatos/devtoolbox-cheats/blob/main/CHANGELOG.md

Assets 2
Loading