jsdeliver regex is broken

mach6

发布于：2020-10-12

举报留言

The current one:

^(https?:)?//cdn\.jsdelivr\.net/gh/[^/]+/[^/@]+@[a-f0-9]{40}

I guess it should be:

^(https?:)?//cdn\.jsdelivr\.net/gh/[^/]+/[^/@]+@[a-f0-9\.]{1,40}\/.*

This also allows version number like 'v1.0'

woxxom管理员

发布于：2020-10-13

编辑于：2020-10-13

举报留言

A version tag can be switched easily to any other commit by the repository's maintainer so it can't be allowed on GreasyFork if I understand the purpose of the external code policy correctly which is to prevent covert code change after the user inspected the external code at installation/update.

woxxom管理员

发布于：2020-10-13

举报留言

BTW, @JasonBarnabe, did you decide to not recreate our mod-only forum because you think it's not useful?

发布留言

登录以发布留言。