paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 38 Packages Projects Releases Wiki Activity

changesets: add changeset for secure templating

Browse Source 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
Patrik Oldsberg
2021-11-19 19:03:30 +01:00
parent 7e8d5d953d
commit a096e4c4d7
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/light-rabbits-matter.md
+5
View File
@@ -0,0 +1,5 @@
---
'@backstage/plugin-scaffolder-backend': patch
---
Switched to executing scaffolder templating in a secure context for any template based on nunjucks, as it is not secure by default (https://mozilla.github.io/nunjucks/api.html#user-defined-templates-warning).