Skip to content

Commit

Permalink
sanitizeShellString() optimized strict sanitation
Browse files Browse the repository at this point in the history
  • Loading branch information
sebhildebrandt committed Feb 20, 2021
1 parent 881dde4 commit 3b20fd7
Show file tree
Hide file tree
Showing 8 changed files with 20 additions and 26 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.md
Expand Up @@ -72,6 +72,7 @@ For major (breaking) changes - **version 4, 3 and 2** - see end of page.

| Version | Date | Comment |
| -------------- | -------------- | -------- |
| 5.3.4 | 2020-02-20 | `sanitizeShellString()` optimized strict sanitation |
| 5.3.3 | 2020-02-15 | `dockerContainerStats()` fixed ID splitting |
| 5.3.2 | 2020-02-15 | `inetLatency()` `ineChecksite()` fixed possible security issue (file://) |
| 5.3.1 | 2020-02-14 | `inetLatency()` `ineChecksite()` `servcices()` `processes()` fixed possible security issue (arrays) |
Expand Down
5 changes: 5 additions & 0 deletions docs/history.html
Expand Up @@ -56,6 +56,11 @@ <h3>Full version history</h3>
</tr>
</thead>
<tbody>
<tr>
<th scope="row">5.3.4</th>
<td>2020-02-20</td>
<td><span class="code">sanitizeShellString()</span> optimized strict sanitation</td>
</tr>
<tr>
<th scope="row">5.3.3</th>
<td>2020-02-15</td>
Expand Down
4 changes: 2 additions & 2 deletions docs/index.html
Expand Up @@ -170,7 +170,7 @@
<img class="logo" src="assets/logo.png">
<div class="title">systeminformation</div>
<div class="subtitle"><span id="typed"></span>&nbsp;</div>
<div class="version">New Version: <span id="version">5.3.3</span></div>
<div class="version">New Version: <span id="version">5.3.4</span></div>
<button class="btn btn-light" onclick="location.href='https://github.com/sebhildebrandt/systeminformation'">View on Github <i class=" fab fa-github"></i></button>
</div>
<div class="down">
Expand Down Expand Up @@ -209,7 +209,7 @@
<div class="title">Downloads last month</div>
</div>
<div class="col-xl-4 col-lg-4 col-md-4 col-12">
<div class="numbers">387</div>
<div class="numbers">389</div>
<div class="title">Dependents</div>
</div>
</div>
Expand Down
5 changes: 5 additions & 0 deletions docs/issues.html
Expand Up @@ -65,6 +65,11 @@ <h4>Linux Temperature</h4>
<p>In some cases you need to install the linux <span class="code">sensors</span> package to be able to measure temperature e.g. on DEBIAN based systems by running</p>
<pre>$ sudo apt-get install lm-sensors</pre>

<h4>Windows, macOS - CPU Speed</h4>

<p><span class="code">node.js</span> and <span class="code">wmic</span> are not able to determine correct CPU current speed on windows and macOS.
This means, you will have constant values here on both platforms for all processor cores in <span class="code">cpuCurrentSpeed()</span>.</p>

<h4>Linux S.M.A.R.T. Status</h4>

<p>To be able to detect S.M.A.R.T. status on Linux you need to install <span class="code">smartmontools</span>. On DEBIAN based linux distributions you can install it by running:</p>
Expand Down
2 changes: 1 addition & 1 deletion docs/security.html
Expand Up @@ -64,7 +64,7 @@ <h2>Command Injection Vulnerability</h2>
<p><span class="bold">Affected versions:</span>
&lt; 5.3.1 and &lt; 4.34.11<br>
<span class="bold">Date:</span> 2021-02-14<br>
<span class="bold">CVE indentifier</span> -
<span class="bold">CVE indentifier</span> CVE-2021-21315
</p>

<h4>Impact</h4>
Expand Down
5 changes: 5 additions & 0 deletions docs/v4/issues.html
Expand Up @@ -64,6 +64,11 @@ <h4>Linux Temperature</h4>
<p>In some cases you need to install the linux <span class="code">sensors</span> package to be able to measure temperature e.g. on DEBIAN based systems by running</p>
<pre>$ sudo apt-get install lm-sensors</pre>

<h4>Windows, macOS - CPU Speed</h4>

<p><span class="code">node.js</span> and <span class="code">wmic</span> are not able to determine correct CPU current speed on windows and macOS.
This means, you will have constant values here on both platforms for all processor cores in <span class="code">cpuCurrentSpeed()</span>.</p>

<h4>Linux S.M.A.R.T. Status</h4>

<p>To be able to detect S.M.A.R.T. status on Linux you need to install <span class="code">smartmontools</span>. On DEBIAN based linux distributions you can install it by running:</p>
Expand Down
2 changes: 1 addition & 1 deletion docs/v4/security.html
Expand Up @@ -63,7 +63,7 @@ <h2>Command Injection Vulnerability</h2>
<p><span class="bold">Affected versions:</span>
&lt; 4.34.11<br>
<span class="bold">Date:</span> 2021-02-14<br>
<span class="bold">CVE indentifier</span> -
<span class="bold">CVE indentifier</span> CVE-2021-21315
</p>

<h4>Impact</h4>
Expand Down
22 changes: 0 additions & 22 deletions lib/poc.js

This file was deleted.

0 comments on commit 3b20fd7

Please sign in to comment.