summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Newson <rnewson@apache.org>2020-04-23 20:43:59 +0100
committerRobert Newson <rnewson@apache.org>2020-04-23 20:43:59 +0100
commit28ddd528d825bea8546fcf7cf518600c304f4836 (patch)
treeaf2c986f4cca23e38514fc41040767997179a4c9
parent254fa5a55417160411c6f21b88df1a389526a665 (diff)
downloadcouchdb-mango-bookmark-3.x.tar.gz
safer binary_to_term in mango_json_bookmarkmango-bookmark-3.x
-rw-r--r--src/mango/src/mango_json_bookmark.erl2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/mango/src/mango_json_bookmark.erl b/src/mango/src/mango_json_bookmark.erl
index 97f81cfb8..83fd00f29 100644
--- a/src/mango/src/mango_json_bookmark.erl
+++ b/src/mango/src/mango_json_bookmark.erl
@@ -54,7 +54,7 @@ unpack(nil) ->
nil;
unpack(Packed) ->
try
- Bookmark = binary_to_term(couch_util:decodeBase64Url(Packed)),
+ Bookmark = binary_to_term(couch_util:decodeBase64Url(Packed), [safe]),
verify(Bookmark)
catch _:_ ->
?MANGO_ERROR({invalid_bookmark, Packed})