diff options
author | Robert Newson <rnewson@apache.org> | 2020-04-23 21:37:30 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-04-23 21:37:30 +0100 |
commit | 66e02a24f35d6d39437f3db8ff5dd28edb787c71 (patch) | |
tree | 02dde3e637e3c72d4646428fbdd609c07eb9530c | |
parent | f3d596544c759568553d298bbb729a522df6d6bd (diff) | |
parent | f332f43fca31bd6be57d58a0ae1a24439f57a716 (diff) | |
download | couchdb-66e02a24f35d6d39437f3db8ff5dd28edb787c71.tar.gz |
Merge pull request #2816 from apache/mango-bookmark-master
safer binary_to_term in mango_json_bookmark
-rw-r--r-- | src/mango/src/mango_json_bookmark.erl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/mango/src/mango_json_bookmark.erl b/src/mango/src/mango_json_bookmark.erl index 97f81cfb8..83fd00f29 100644 --- a/src/mango/src/mango_json_bookmark.erl +++ b/src/mango/src/mango_json_bookmark.erl @@ -54,7 +54,7 @@ unpack(nil) -> nil; unpack(Packed) -> try - Bookmark = binary_to_term(couch_util:decodeBase64Url(Packed)), + Bookmark = binary_to_term(couch_util:decodeBase64Url(Packed), [safe]), verify(Bookmark) catch _:_ -> ?MANGO_ERROR({invalid_bookmark, Packed}) |