mirror of
https://github.com/linuxboot/heads.git
synced 2025-03-23 12:35:24 +00:00
f52466edbf
Attempt to fix the following issues: 1. unescaped file names may let an attacker display arbitrary whiptail prompts --> escape, original code by @JonathonHall-Purism 2. whiptail itself allows escape characters such as \n --> use an escape character not used by whiptail, i.e. # 3. performance issues caused by diff'ing too early --> only generate a diff to display to the user, if an actual issue is found