Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2025-12-16 22:50:13 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

🔒 Some security vulnerabilities https://github.com/siyuan-note/siyuan/issues/13426

Browse source
This commit is contained in:
Daniel 2024-12-11 17:15:54 +08:00
parent 2b5a9f9f1a
commit e70ed57f6e
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
5 changed files with 28 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
kernel/treenode/template.go
View file

@ -31,6 +31,12 @@ import (
func BuiltInTemplateFuncs() (ret template.FuncMap) {
ret = sprig.TxtFuncMap()
// 因为安全原因移除一些函数 https://github.com/siyuan-note/siyuan/issues/13426
delete(ret, "env")
delete(ret, "expandenv")
delete(ret, "getHostByName")
ret["Weekday"] = util.Weekday
ret["WeekdayCN"] = util.WeekdayCN
ret["WeekdayCN2"] = util.WeekdayCN2