search

ipitio / backage

Endpoint behind badges for GitHub Packages
https://ipitio.github.io/backage/
MIT License
20 stars 10 forks source link

Use yq to work around Shields RCE patch #23

Closed ipitio closed 1 month ago

ipitio commented 1 month ago

Info: https://github.com/badges/shields/issues/10553

Similarly in Grafana: https://github.com/grafana/grafana-json-datasource/issues/343#issuecomment-1805872616

ipitio commented 1 month ago

Rolling out an XML endpoint for all the packages that can be used with Shields instead, with mikefarah/yq:

<?xml version=\"1.0\" encoding=\"UTF-8\"?><bkg>$(yq -ox -I0 "$1" | sed 's/"/\\"/g')</bkg>