[Rpm-maint] [rpm-software-management/rpm] Introduce convenient %gsub macro to wrap Lua's string.gsub() (#1764)
Panu Matilainen
notifications at github.com
Wed Nov 17 09:28:32 UTC 2021
> This interests me because I would really like to see simple alternatives to shelling out to sed and such available. As far as I understand things, it's still not safe to parse an arbitrary specfile because it could shell out to anything.
Yes, any macro can shell out to anything. Lua as it is in rpm doesn't make that any better because you can do and call out arbitrary stuff from there as well, but Lua does have language-level support for completely sandboxing code. OTOH to do useful thing, some amount of IO is usually required...
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1764#issuecomment-971394924
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211117/94d901fb/attachment.html>
More information about the Rpm-maint
mailing list