Unnamed repository; edit this file 'description' to name the repository. http://cnjoe.info/git/zsh.git/atom/plugins/hitokoto?h=master 2021-11-11T21:45:24Z 2021-11-11T21:45:24Z Marc Cornellà hello@mcornella.com 2021-11-09T08:31:09Z urn:sha1:72928432f1ddaa244e02067dd7fc14948a4a5ce4 The `rand-quote` plugin uses quotationspage.com and prints part of its content to the shell without sanitization, which could trigger command injection. There is no evidence that this has been exploited, but this commit removes all possibility for exploit. Similarly, the `hitokoto` plugin uses the hitokoto.cn website to print quotes to the shell, also without sanitization. Furthermore, there is also no evidence that this has been exploited, but with this change it is now impossible. 2019-12-29T05:04:24Z sinrimin ashen@moesrc.com 2019-12-29T05:04:24Z urn:sha1:d9e64344aa151f9b8e13a4f8054509a5d78bb718