22 commits

Author	SHA1	Message	Date
Carlo Sala	a30c63e011	fix(dotenv): reject extremely large named pipes	2026-04-16 20:33:43 +02:00
Carlo Sala	9b19287c88	fix(dotenv): unknown vars should expand to empty	2026-04-16 20:09:26 +02:00
Carlo Sala	cb31ff6fd7	fix(dotenv): FIFO shouldn't be read twice	2026-04-16 19:55:50 +02:00
Marc Cornellà	3f36e70822	fix(dotenv): forbid setting special variables	2026-04-08 19:24:03 +02:00
Marc Cornellà	e6ab2b3645	feat(dotenv): check for .env file size to prevent DoS	2026-03-28 11:09:51 +01:00
Marc Cornellà	2014363332	fix(dotenv): implement secure parsing for .env files and add comprehensive tests	2026-03-28 11:09:51 +01:00
Marc Cornellà	139bc2b5a1	fix(dotenv): expect explicit yes before loading .env file	2026-03-28 11:09:51 +01:00
Thomas Witt	993afc8267	feat(dotenv): add named pipe (FIFO) support (#13561)	2026-02-16 12:08:13 +01:00
Marc Cornellà	3427da4057	fix(dotenv): actually exit when .env syntax is broken	2022-02-18 19:41:21 +01:00
Marc Cornellà	a7efd96a60	fix(dotenv): match for exact directory path in allowed/disallowed files	2022-01-19 19:27:53 +01:00
Marc Cornellà	c44b99e901	fix(dotenv): draw confirmation prompt in next empty line ... Without this fix the confirmation prompt appears wherever the cursor is, which means that it might appear in the command line when using a widget that changes the directory without redrawing the prompt (an example of this are the dircycle and dirhistory plugins).	2021-07-07 10:41:14 +02:00
Jakob Hellermann	9cdc276496	dotenv: add never option to confirmation prompt (#9102)	2020-07-11 17:34:24 +02:00
Jędrzej Lewandowski	6fbfc4c78b	dotenv: add agree-once improvement to confirmation prompt (#8729) ... * dotenv: add possibility to agree once for a given .env file * refactor: fix code style * Use :A modifier instead of readlink. Thanks Aloxaf * Use grep and clean up allowed list check logic * Simplify and reorder file; change default allowed list path * Add new feature to README * Make sure ZSH_CACHE_DIR is defined * Resolve symlinks in $PWD before storing in allowed list Co-authored-by: Aloxaf <bailong104@gmail.com> Co-authored-by: Marc Cornellà <marc.cornella@live.com>	2020-03-23 12:10:06 +01:00
Marc Cornellà	f17e0219fd	dotenv: fix prompt newline	2020-02-13 18:33:24 +01:00
Maxime Richard	634a50936a	dotenv: add ZSH_DOTENV_PROMPT config (#8624)	2020-02-13 18:10:59 +01:00
Mazin Ahmed	e178ae39b4	dotenv: prompt before executing dotenv file (#8606) ... Co-authored-by: Marc Cornellà <marc.cornella@live.com>	2020-02-12 17:51:40 +01:00
Arshad Kazmi	f960e2be6f	dotenv: add support for custom env file names (#7861)	2019-05-19 22:45:27 +02:00
Marc Cornellà	c781d708da	dotenv: test and warn of incorrect.env syntax ... Fixes #6337	2018-08-08 00:05:34 +02:00
Marc Cornellà	9ecde7f732	dotenv: call function on startup ... Fixes #7017	2018-08-07 23:54:07 +02:00
Janosch Schwalm	19b925e741	use https everywhere (#6574) ... * use https everywhere * use https links on the files that are left Also, removed some broken links and updated redirections.	2018-08-07 20:42:01 +02:00
Arthur	7cb5fa8aea	Fix dotenv plugin accepted file format and clarify README (#6093) ... * Fix dotenv plugin accepted file format * clarify README and add disclaimer section	2018-07-10 23:31:47 +02:00
Arthur	8d35fa0e2f	add dotenv plugin (#4373)	2016-12-14 17:49:08 +01:00