Michael Schurter
f87ec7e64e
template: disallow writeToFile by default
...
Resolves #12095 by WONTFIXing it.
This approach disables `writeToFile` as it allows arbitrary host
filesystem writes and is only a small quality of life improvement over
multiple `template` stanzas.
This approach has the significant downside of leaving people who have
altered their `template.function_denylist` *still vulnerable!* I added
an upgrade note, but we should have implemented the denylist as a
`map[string]bool` so that new funcs could be denied without overriding
custom configurations.
This PR also includes a bug fix that broke enabling all consul-template
funcs. We repeatedly failed to differentiate between a nil (unset)
denylist and an empty (allow all) one.
2022-03-28 17:05:42 -07:00
..
2022-03-23 09:41:25 +01:00
2020-03-23 19:32:58 -04:00
2022-03-15 12:58:52 -05:00
2022-03-15 12:58:52 -05:00
2022-03-15 12:58:52 -05:00
2022-01-28 14:41:49 -05:00
2022-02-18 16:12:36 -08:00
2022-03-15 12:58:52 -05:00
2021-03-10 08:17:56 -05:00
2022-03-15 12:58:52 -05:00
2022-02-09 19:51:47 -05:00
2021-10-01 10:14:28 -04:00
2022-03-23 09:41:25 +01:00
2022-03-21 10:29:57 +01:00
2022-03-24 08:45:13 +01:00
2022-03-03 12:13:32 +01:00
2022-01-18 23:43:00 +00:00
2022-03-15 12:58:52 -05:00
2022-02-18 16:12:36 -08:00
2021-10-01 10:14:28 -04:00
2022-03-15 12:58:52 -05:00
2022-01-10 10:19:07 -05:00
2022-03-28 17:05:42 -07:00
2022-03-28 17:05:42 -07:00
2022-03-15 12:58:52 -05:00
2022-03-22 09:48:38 -04:00
2022-03-15 12:58:52 -05:00
2022-02-16 14:34:36 -05:00
2022-03-24 08:45:13 +01:00
2022-03-17 13:56:14 -04:00
2022-03-15 12:58:52 -05:00
2020-12-08 13:09:20 -05:00
2022-03-15 12:58:52 -05:00
2021-11-17 11:15:07 -05:00
2022-03-15 12:58:52 -05:00
2018-10-16 16:56:55 -07:00
2021-10-01 10:14:28 -04:00
2022-03-15 12:58:52 -05:00
2020-04-20 10:33:40 -04:00
2022-03-15 12:58:52 -05:00
2022-03-23 09:41:25 +01:00
2022-03-24 08:45:13 +01:00
2022-03-14 09:21:20 +01:00
2022-03-25 13:43:33 -05:00
2020-10-01 11:12:14 -04:00
2022-01-14 12:25:32 -05:00
2021-10-26 20:57:07 -04:00
2022-03-15 12:58:52 -05:00
2021-10-26 20:57:07 -04:00
2021-10-26 20:57:07 -04:00
2022-03-15 12:58:52 -05:00
2022-03-25 13:43:33 -05:00
2022-03-15 12:58:52 -05:00
2021-03-09 15:28:58 +01:00
2022-03-15 12:58:52 -05:00
2020-10-22 15:26:32 -07:00
2022-03-15 12:58:52 -05:00
2021-05-07 13:58:40 -04:00
2021-10-01 10:14:28 -04:00
2022-03-15 12:58:52 -05:00
2021-12-06 15:20:34 -05:00
2019-01-22 15:50:08 -08:00
2022-03-15 12:58:52 -05:00
2015-11-24 09:38:07 -08:00
2022-03-15 12:58:52 -05:00
2018-09-13 10:43:40 -07:00
2022-03-15 12:58:52 -05:00
2020-12-08 12:47:04 -08:00
2022-03-15 12:58:52 -05:00
2021-04-16 16:36:07 -06:00
2022-03-24 08:45:13 +01:00
2022-03-03 12:13:00 +01:00
2022-03-15 12:58:52 -05:00
2018-02-15 13:59:02 -08:00
2022-03-15 12:58:52 -05:00
2015-09-06 18:39:03 -07:00
2021-10-01 10:14:28 -04:00
2022-03-15 12:58:52 -05:00
2019-01-22 15:44:31 -08:00
2022-03-15 12:58:52 -05:00
2016-08-03 16:12:47 -07:00
2021-10-01 10:14:28 -04:00
2022-03-25 13:43:33 -05:00
2020-11-23 10:11:00 -06:00