cargo-ebuild icon indicating copy to clipboard operation
cargo-ebuild copied to clipboard

`cargo ebuild` does not escape or sanitize DESCRIPTION

Open trofi opened this issue 2 years ago • 0 comments

$ cargo ebuild on https://github.com/Michael-F-Bryan/mdbook-linkcheck generates among other things this snippet:

# ...
DESCRIPTION="A backend for `mdbook` which will check your links for you."
# ...

Note the mdbook. That at best fails sourcing:

$ pkgcheck scan .
app-text/mdbook-linkcheck
  SourcingError: version 0.7.7: failed sourcing ebuild: external commands disallowed during metadata regen: 'mdbook'

One of the options would be to drop suspicious characters, escape them or convert to something safer.

Thanks!

trofi avatar Jan 17 '23 23:01 trofi