04e94274fb
* just dont pass locals
- also fix globals
- added tests
* fixed tests
(cherry picked from commit b9b0b23015)
2 lines
215 B
YAML
2 lines
215 B
YAML
bugfixes:
|
|
- Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156
|