lee/changedetection.io
1
0 Fork 0
mirror of https://github.com/dgtlmoon/changedetection.io.git synced 2026-10-18 18:00:35 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Merge pull request from GHSA-4r7v-whpg-8rx3

Browse Source 
* CVE-2024-32651 - Security fix - Server Side Template Injection in Jinja2 allows Remote Command Execution

* use ImmutableSandboxedEnvironment also in validation
This commit is contained in:
dgtlmoon authored and GitHub committed 2024-04-25 22:06:09 +02:00
1 parent 1ba29655f5
commit bd6eda696c
15 files changed
+147 -44
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/workflows/test-only.yml
+1
View File
@@ -59,6 +59,7 @@ jobs:
echo "run test with unittest"
docker run test-changedetectionio bash -c 'python3 -m unittest changedetectionio.tests.unit.test_notification_diff'
docker run test-changedetectionio bash -c 'python3 -m unittest changedetectionio.tests.unit.test_watch_model'
docker run test-changedetectionio bash -c 'python3 -m unittest changedetectionio.tests.unit.test_jinja2_security'
# All tests
echo "run test with pytest"