cargo-ebuild
cargo-ebuild copied to clipboard
`cargo ebuild` does not escape or sanitize DESCRIPTION
$ cargo ebuild on https://github.com/Michael-F-Bryan/mdbook-linkcheck generates among other things this snippet:
# ...
DESCRIPTION="A backend for `mdbook` which will check your links for you."
# ...
Note the mdbook. That at best fails sourcing:
$ pkgcheck scan .
app-text/mdbook-linkcheck
SourcingError: version 0.7.7: failed sourcing ebuild: external commands disallowed during metadata regen: 'mdbook'
One of the options would be to drop suspicious characters, escape them or convert to something safer.
Thanks!