Skip to content

Conversation

@hslatman
Copy link
Member

@hslatman hslatman commented Mar 5, 2024

This addresses smallstep/certificates#1745. If the contents of defaults.json were somehow mangled and failed to be parsed as JSON, the error was ignored. Now it's returned up.

Not much we can do for the Go vulnerability at this time.

Would be nice if the blackfriday package could just be linted, but there were quite some issues with it, and it appeared to be copied from https://github.com/russross/blackfriday. Was some code customized in the copy to make it work in our programs?

@hslatman hslatman requested review from a team and dopey March 5, 2024 23:40
@dopey
Copy link
Contributor

dopey commented Mar 6, 2024

Yes, some code was customized in blackfriday. @maraino will know better.

@hslatman hslatman merged commit ad26036 into main Mar 6, 2024
@hslatman hslatman deleted the herman/fix-load-vintage-defaults branch March 6, 2024 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants