GitHub Pages integration: does it allow arbitrary code execution?
Probably you're aware of this already since it is a few years old here. Basically someone used your peg-multimarkdown to create a rpeg-multimarkdown so that it can be used in Jekyll. It could be merged into GitHub Pages if there's no arbitrary code execution. From the site above it seems no body has ever confirmed if peg-multimarkdown allows arbitrary code execution though. So could you perhaps give an insight over there?
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by fletcher on 26 Jan, 2016 11:49 PM
I can't confirm what was done with the code in rpeg-multimarkdown.
There's not arbitrary code execution in MMD -- what purpose would it serve?
But any attempt to use MMD in another project should focus on MMD-5, not v3 which is significantly out of date at this point.
F-
fletcher closed this discussion on 26 Jan, 2016 11:49 PM.