mirror of
https://github.com/robbyrussell/oh-my-zsh.git
synced 2026-04-22 22:33:29 +02:00
6cb41b70a6
The `omz_urldecode` function uses an eval to decode the input which can be exploited to inject commands. This is used only in the svn plugin and it requires a complex process to exploit, so it is highly unlikely to have been used by an attacker.