On Fri, 23 May 2025 08:10:41 -0500 Tim Chase via Remind-fans <[email protected]> wrote:
> I didn't see anything in particular, and most remind-files are > user-generated, so any shooting-yourself-in-the-foot is self-induced. I thought about this some more. Remind disables shell() and RUN if you explicitly use "RUN OFF" or if you INCLUDE a file you don't own. I think it's prudent to also disable shell() from an eval() expression, and that is done in this commit: https://salsa.debian.org/dskoll/remind/-/commit/4c2b6031cdb71c1e805e28e2808d88e5704f95c6 Regards, Dianne. _______________________________________________ Remind-fans mailing list [email protected] https://dianne.skoll.ca/mailman/listinfo/remind-fans Remind is at https://dianne.skoll.ca/projects/remind/
