paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 42 Packages Projects Releases Wiki Activity

Merge pull request #8235 from backstage/mob/secure-templating

Browse Source 
scaffolder-backend: sandbox v1beta3 template execution
This commit is contained in:
Johan Haals
2021-11-25 11:51:22 +01:00
committed by GitHub
parent ff1ea41b23 452b86916a
commit 5f7033c7bd
11 changed files with 10961 additions and 89 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/light-rabbits-matter.md
+5
View File
@@ -0,0 +1,5 @@
---
'@backstage/plugin-scaffolder-backend': patch
---
Switched to executing scaffolder templating in a secure context for any template based on nunjucks, as it is [not secure by default](https://mozilla.github.io/nunjucks/api.html#user-defined-templates-warning).