search

sigstore / docs

Sigstore documentation
https://sigstore.dev
MIT License
62 stars 73 forks source link

Strings between colons can get emojified, leading to openssl output being rendered as a flag #311

Closed fscoto closed 1 week ago

fscoto commented 1 week ago

On the Inspecting Gitsign Commit Signatures page, there is a PKCS7 output dump containing certificate information. The public key being shown there contains the sequence :de:. Something in the pipeline changes this to a flag emoji (🇩🇪) instead. This does not accurately reflect the actual output users could typically expect from the openssl command line.

Excerpt from the page as of the time creating this issue:

        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:ec:60:4b:67:aa:28:d9:34:f3:83:9c:17:a5:c8:
                    a5:87:5e🇩🇪db:c2:65:c8:8b:e6:dc:c4:6f:9c:87:
                    60:05:42:18:f7:b7:0d:8f:06:f1:62:ce:9a:59:9d:
                    71:12:55:1b:c3:d4:c7:90:a5:f6:0a:b4:1a:b3:0e:
                    a7:3d:4e:12:38

Where the 🇩🇪 symbol should instead be :de:.