Skip to content

0.5.3 - 2020-08-13
Compare
Choose a tag to compare
@dbanty dbanty released this 13 Aug 17:22
· 582 commits to main since this release
v.0.5.3
0230ec5
This commit was created on github.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Security

  • All values that become file/directory names are sanitized to address path traversal vulnerabilities (CVE-2020-15141)
  • All values that get placed into python files (everything from enum names, to endpoint descriptions, to default values) are validated and/or saniziatied to address arbitrary code execution vulnerabilities (CVE-2020-15142)

Changes

  • Due to security concerns/implementation complexities, default values are temporarily unsupported for any RefProperty that doesn't refer to an enum.
  • Defaults for properties must now be valid values for their respective type (e.g. "example string" is an invalid default for an integer type property, and the function for an endpoint using it would fail to generate and be skipped).

Additions

  • Added support for header parameters (#117)

Fixes

  • JSON bodies will now be assigned correctly in generated clients(#139 & #147). Thanks @pawamoy!
Assets 2
Loading