Changelog
Features
- f81cb32 feat: Fix multiple security vulns thanks to secur0.com
- 1e51cc5 feat: Add shellQuote and shellQuoteList template funcs
- 4249f4f feat: Add gopassCat template function
- a7d91a5 feat: Add debugf template function
Fixes
- 0ad679a fix: Tighten permissions on temporary files
- 4031be1 fix: Ensure HTTP cache dir is private
- ba5a19a fix: Disallow relative paths with /.. suffix
- 1fe7627 fix: Disallow .. in ignore and remove patterns
- 3c9e70b fix: Disallow .. paths in mackup files
- 01b60dd fix: Disallow filenames that resolve to .
- 5cdaf4e fix: Improve handling of untrusted relative paths
- e8a57dc fix: Disallow .. paths in .chezmoiroot
- 76e2ddf fix: Reject negative format-indent-width template directives
- 840f682 fix: Ensure that secret keyring get command always writes a private file
- f7282b8 fix: Ensure that age-keygen always writes a private file
- e7cbe71 fix: Make persistent state directory private by default
- 0d6fc2b fix: Prevent directory escape in tar and rar archives
- 239cc6b fix: Disallow file and dir names that resolve to ..