ohmyzsh/plugins/dotenv/.zunit.yml at d170d18746bb06db7b2fc97b67e281597a3fc152 - linux/ohmyzsh - git.gc4.at

linux/ohmyzsh

mirror of https://github.com/ohmyzsh/ohmyzsh.git synced 2026-05-29 04:53:17 +02:00

Marc Cornellà d170d18746

Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled

Details

fix(dotenv): introduce safe parsing of .env files (#13778 )

* fix(dotenv): expect explicit yes before loading .env file
* fix(dotenv): implement secure parsing for .env files and add comprehensive tests
* feat(dotenv): check for .env file size to prevent DoS
* fix(dotenv): forbid setting special variables
* fix(dotenv): FIFO shouldn't be read twice
* fix(dotenv): unknown vars should expand to empty
* fix(dotenv): reject extremely large named pipes
* docs(dotenv): update to new parsing system
* fix(dotenv): add support for escaped dollars
* chore(dotenv): only declare local variables once
* fix(dotenv): apply review suggestions
* docs(dotenv): update test instructions

Co-authored-by: Carlo Sala <carlosalag@protonmail.com>

2026-05-28 20:23:45 +02:00

9 lines

154 B

YAML

Raw Blame History

 tap: false
 directories:
   tests: tests
   output: tests/_output
   support: tests/_support
 time_limit: 0
 fail_fast: false
 allow_risky: false
 verbose: false