修复了一个由版本更新日志显示导致的潜在远程代码执行攻击漏洞

2021-01-27 19:20:29 +08:00
parent d6d6fae2ca
commit 269b14394d
4 changed files with 35 additions and 14 deletions
@@ -44,7 +44,7 @@ module.exports = async newVerNum => {
    desc: version.desc,
  })
  version.version = newVerNum
-  version.desc = newChangeLog
+  version.desc = newMDChangeLog.replace(/(?:^|(\n))#{1,6} (.+)\n/g, '$1$2').trim()
  pkg.version = newVerNum

  console.log(chalk.blue('new version: ') + chalk.green(newVerNum))