Kyle Evans e9c3ceb159 lualoader: Use cli_execute_unparsed instead of loader.interpret ...

loader.interpret should not be used for executing loader commands from an
untrusted source (e.g. environment vars) as it will allow execution of
arbitrary Lua. Replace it with a call to the recently introduced
cli_execute_unparsed, which parses it out as a loader command and then
dispatches it as a loader command. This effectively filters out arbitrary
Lua.

2018-03-07 18:31:01 +00:00

..

cli.lua

lualoader: Fix name, cli.execute_unparsed -> cli_execute_unparsed

2018-03-07 18:28:41 +00:00

color.lua

lualoader: Convert instances of KEYSTR_ESCAPE .. "[" -> KEYSTR_CSI

2018-02-27 22:02:39 +00:00

config.lua

lualoader: Fix some lint-mentioned errors

2018-03-02 02:39:16 +00:00

core.lua

lualoader: Only loadelf before boot/autoboot if no kernel loaded

2018-03-07 04:11:14 +00:00

core.lua.8

core.lua(8): Add missing note about core.KEYSTR_CSI

2018-03-02 05:38:08 +00:00

drawer.lua

lualoader: logdef -> logodef typo

2018-03-04 03:23:19 +00:00

loader.lua

lualoader: Add note about importance of including the cli module early

2018-03-05 00:59:55 +00:00

Makefile

lualoader: Use FILESDIR instead of BINDIR

2018-03-05 01:18:32 +00:00

menu.lua

lualoader: Use cli_execute_unparsed instead of loader.interpret

2018-03-07 18:31:01 +00:00

menu.lua.8

Add menu.lua(8), but do not add to distribution

2018-03-02 05:36:04 +00:00

password.lua

lualoader: Use global printc instead of loader.printc

2018-03-02 16:06:20 +00:00

screen.lua

lualoader: Use global printc instead of loader.printc

2018-03-02 16:06:20 +00:00