diff options
| author | Reepca Russelstein <reepca@russelstein.xyz> | 2025-07-24 17:35:37 -0500 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2025-09-01 16:13:11 +0200 |
| commit | 2a333541e8f1907ae0bc80cf500a99567ca46d08 (patch) | |
| tree | 57fd3e86b5a8b802b8a75baad5d98feaf4ecbb58 /doc/htmlxref.cnf | |
| parent | 43bb79fc29e7f4f2ea06be138df195609b11ea97 (diff) | |
perform-download: Ensure reading never evaluates code.
Since this is used to implement the "download" and "git-download" builtins,
which are run outside of any chroot, this is trusted code with respect to the
user-supplied strings it reads.
* guix/scripts/perform-download.scm (read/safe): new procedure.
(perform-download, perform-git-download): use it.
(guix-perform-download): explicitly set 'read-eval?' to #f and
'read-hash-procedures' to '(). #f is the default value of 'read-eval?' on
startup, but set it anyway to be certain.
Change-Id: I93cb8e32607a6f9a559a26c1cbd6b88212ead884
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Diffstat (limited to 'doc/htmlxref.cnf')
0 files changed, 0 insertions, 0 deletions