arch-hs icon indicating copy to clipboard operation
arch-hs copied to clipboard

Description with backticks gets executed

Open james-callahan opened this issue 3 years ago • 0 comments

I ran arch-hs to create haskell-nicify-lib and it generated a PKGBUILD with:

pkgdesc="Pretty print the standard output of default `Show` instances."

When building with aur build, this resulted in e.g.

/home/james/src/PKGBUILDs/fossa-cli/haskell-nicify-lib/PKGBUILD: line 8: Show: command not found

This implies a code execution security problem.

james-callahan avatar Jan 17 '22 05:01 james-callahan