zestedesavoir / zmarkdown / 5461408640 / 1

96%

master: 96%

push

github

[rebber] Fix two security flaws (#493)

1. An RCE was found in images: when an image path contained an `}`, the
LaTeX image command could be bypassed to allow malicious code injection.
2. An RCE was found in code blocks: a previous protection measure was
unsufficient, thus allowing code blocks to be escaped in LaTeX

1035 of 1132 branches covered (91.43%)

Branch coverage included in aggregate %.

1952 of 1979 relevant lines covered (98.64%)

2111.59 hits per line