Vulnerable configs only on user/remote level

vknabel · Mar 15, 2021 · e019036 · e019036
1 parent a668717
commit e019036
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.4.5
+
+Fixes vulnerability which allowed malicous workspaces to execute code when opened by providing. Now the vulnerable configs cannot be overrided in workspaces anymore: `swiftlint.path`.
+
 ## 1.4.4
 
 - Pass currently linted file path to Swiftlint #30 after save

diff --git a/package.json b/package.json
@@ -6,7 +6,7 @@
     "type": "git",
     "url": "https://github.com/vknabel/vscode-swiftlint"
   },
-  "version": "1.4.4",
+  "version": "1.4.5",
   "license": "MIT",
   "author": {
     "name": "Valentin Knabel",
@@ -57,7 +57,8 @@
         "swiftlint.path": {
           "type": "string",
           "default": "/usr/local/bin/swiftlint",
-          "description": "The location of your globally installed SwiftLint."
+          "description": "The location of your globally installed SwiftLint.",
+          "scope": "machine"
         },
         "swiftlint.toolchainPath": {
           "type": "string",