search

git-learning-game / oh-my-git

An interactive Git learning game!
https://ohmygit.org
Other
1.98k stars 143 forks source link

Security problem with levels files #219

Open m0rp30 opened 2 months ago

m0rp30 commented 2 months ago

There are some security problems, if I add some code to the levels file it is executed without checking.

e.g., in the levels/intro/risky file if I add, under [setup], code like this touch /home/$(whoami)/payload.txt the code is executed unchecked.

I suggest taking a different approach to run the command