jsdeliver regex is broken

mach6

發表於：2020-10-12

檢舉留言

The current one:

^(https?:)?//cdn\.jsdelivr\.net/gh/[^/]+/[^/@]+@[a-f0-9]{40}

I guess it should be:

^(https?:)?//cdn\.jsdelivr\.net/gh/[^/]+/[^/@]+@[a-f0-9\.]{1,40}\/.*

This also allows version number like 'v1.0'

woxxom管理員

發表於：2020-10-13

編輯:2020-10-13

檢舉留言

A version tag can be switched easily to any other commit by the repository's maintainer so it can't be allowed on GreasyFork if I understand the purpose of the external code policy correctly which is to prevent covert code change after the user inspected the external code at installation/update.

woxxom管理員

發表於：2020-10-13

檢舉留言

BTW, @JasonBarnabe, did you decide to not recreate our mod-only forum because you think it's not useful?

發表回覆

登入以回覆