search

grosser / parallel_tests

Ruby: 2 CPUs = 2x Testing Speed for RSpec, Test::Unit and Cucumber
3.38k stars 495 forks source link

Arbitary Code Injection #539

Closed Martin-Spamer closed 7 years ago

Martin-Spamer commented 7 years ago

The cucumber-jvm-parallel-plugin allows arbitrary code injection via tags element of the configuration.

The tags element is inserted, un-sanitised directly into the generated test code directly.

arbitary string could include code
grosser commented 7 years ago

idk anything about cucumber-jvm-parallel-plugin ... maybe wrong repo ?

Martin-Spamer commented 7 years ago

Yes wrong repo should have been https://github.com/temyers/cucumber-jvm-parallel-plugin

Sorry.