Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Using command to open file path in dde-fil-manager, incorrect path opened during execution #2027

Merged
merged 1 commit into from
Jun 19, 2024

Conversation

liyigang1
Copy link
Contributor

Processing command line paths containing./,../,~/ Path processing of spaces

Log: Using command to open file path in dde-fil-manager, incorrect path opened during execution
Bug: https://pms.uniontech.com/bug-view-260195.html

…th opened during execution

Processing command line paths containing./,../,~/ Path processing of spaces

Log: Using command to open file path in dde-fil-manager, incorrect path opened during execution
Bug: https://pms.uniontech.com/bug-view-260195.html
@deepin-ci-robot
Copy link

deepin pr auto review

关键摘要:

  • dde-file-manager脚本中,对路径参数的处理逻辑可能存在安全风险,应确保路径参数不会被用作恶意代码的替换。
  • file-manager.sh脚本中,对路径参数的处理逻辑同样可能存在安全风险,应确保路径参数不会被用作恶意代码的替换。
  • file-manager1dbus.cpp中,对路径参数的处理逻辑同样可能存在安全风险,应确保路径参数不会被用作恶意代码的替换。
  • SingleApplication类中,对arguments变量的处理逻辑可能存在安全风险,应确保参数不会被用作恶意代码的替换。
  • FileManager1DBus类中,对URIsArgs变量的处理逻辑可能存在安全风险,应确保参数不会被用作恶意代码的替换。

是否建议立即修改:

@deepin-ci-robot
Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: liyigang1, max-lvs

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@max-lvs max-lvs merged commit 51eb301 into linuxdeepin:master Jun 19, 2024
20 of 21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants