diff options
| author | Robert Newson <rnewson@apache.org> | 2020-04-23 21:37:49 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-04-23 21:37:49 +0100 |
| commit | 2ca01cd661fdd33dc082c9c954f63c6b77726c5d (patch) | |
| tree | 1dd33e15d88e8cdce5547b98325ca7aa3d9e1d9b | |
| parent | b88d9924520ecb34f8f885899e8e70d68a182a77 (diff) | |
| parent | 0a24f6f5989d37d79586333cbadb0c80b561b9a7 (diff) | |
| download | couchdb-2ca01cd661fdd33dc082c9c954f63c6b77726c5d.tar.gz | |
Merge pull request #2818 from apache/mango-bookmark-3.0.x
safer binary_to_term in mango_json_bookmark
| -rw-r--r-- | src/mango/src/mango_json_bookmark.erl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/mango/src/mango_json_bookmark.erl b/src/mango/src/mango_json_bookmark.erl index 97f81cfb8..83fd00f29 100644 --- a/src/mango/src/mango_json_bookmark.erl +++ b/src/mango/src/mango_json_bookmark.erl @@ -54,7 +54,7 @@ unpack(nil) -> nil; unpack(Packed) -> try - Bookmark = binary_to_term(couch_util:decodeBase64Url(Packed)), + Bookmark = binary_to_term(couch_util:decodeBase64Url(Packed), [safe]), verify(Bookmark) catch _:_ -> ?MANGO_ERROR({invalid_bookmark, Packed}) |