From dca1803ced8fa20e5b6f22cb37603887d9b7a7e0 Mon Sep 17 00:00:00 2001 From: Eric Nielsen Date: Mon, 17 Apr 2017 16:40:34 -0500 Subject: [PATCH] [prompt] Don't expand git_info in eriner theme to avoid the git-info vulnerability to execute an arbitrary command, as reported in #158. Fixes #158 (for eriner theme), Closes #168 --- modules/prompt/themes/eriner.zsh-theme | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/prompt/themes/eriner.zsh-theme b/modules/prompt/themes/eriner.zsh-theme index bf5c940..8bbd4ee 100644 --- a/modules/prompt/themes/eriner.zsh-theme +++ b/modules/prompt/themes/eriner.zsh-theme @@ -68,7 +68,7 @@ prompt_eriner_git() { if [[ -n ${git_info} ]]; then local indicator [[ ${git_info[color]} == yellow ]] && indicator='± ' - prompt_eriner_segment ${git_info[color]} " %F{black}${(e)git_info[prompt]} ${indicator}" + prompt_eriner_segment ${git_info[color]} ' %F{black}${(e)git_info[prompt]} ${indicator}' fi }