Package: plowshare / 2.1.7-2
Metadata
Package | Version | Patches format |
---|---|---|
plowshare | 2.1.7-2 | 3.0 (quilt) |
Patch series
view the series filePatch | File delta | Description |
---|---|---|
01 disable javascript.patch | (download) |
docs/plowdown.1 |
3 3 + 0 - 0 ! |
disable javascript execution Plowshare uses rhino CLI or similar to execute javascript downloaded from the Internet. Since this is not filtered or sandboxed at all, the javascript can obtain arbitrary access to the system and so this patch disables it by default. . Some modules depend on javascript in order to function normally and so an option is provided to enable javascript by setting the environment variable `PLOWSHARE_DEBIAN_JS=yes`. |
1