b9b0b23015
* just dont pass locals - also fix globals - added tests * fixed tests
2 lines
215 B
YAML
2 lines
215 B
YAML
bugfixes:
|
|
- Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156
|