Forbid any exec commands

merge-requests/30/head
Bob Mottram 2022-10-26 14:56:13 +01:00
parent a067353aff
commit 4c1cf463b8
1 changed files with 1 additions and 1 deletions

View File

@ -1101,7 +1101,7 @@ def dangerous_markup(content: str, allow_local_network_access: bool) -> bool:
"""
separators = [['<', '>'], ['&lt;', '&gt;']]
invalid_strings = [
'analytics', 'ampproject', 'googleapis'
'analytics', 'ampproject', 'googleapis', '_exec('
]
if _is_dangerous_string_simple(content, allow_local_network_access,
separators, invalid_strings):