Files
nomad/command/agent
Michael Schurter f87ec7e64e template: disallow writeToFile by default
Resolves #12095 by WONTFIXing it.

This approach disables `writeToFile` as it allows arbitrary host
filesystem writes and is only a small quality of life improvement over
multiple `template` stanzas.

This approach has the significant downside of leaving people who have
altered their `template.function_denylist` *still vulnerable!* I added
an upgrade note, but we should have implemented the denylist as a
`map[string]bool` so that new funcs could be denied without overriding
custom configurations.

This PR also includes a bug fix that broke enabling all consul-template
funcs. We repeatedly failed to differentiate between a nil (unset)
denylist and an empty (allow all) one.
2022-03-28 17:05:42 -07:00
..
2021-10-01 10:14:28 -04:00
2021-10-01 10:14:28 -04:00
2018-10-16 16:56:55 -07:00
2021-10-01 10:14:28 -04:00
2021-05-07 13:58:40 -04:00
2021-10-01 10:14:28 -04:00
2018-09-13 10:43:40 -07:00
2018-02-15 13:59:02 -08:00
2015-09-06 18:39:03 -07:00
2021-10-01 10:14:28 -04:00
2019-01-22 15:44:31 -08:00
2021-10-01 10:14:28 -04:00
2022-03-25 13:43:33 -05:00