From 70ae62f8155159c12a93d713a8cba4e222dccbe7 Mon Sep 17 00:00:00 2001 From: rarified Date: Fri, 15 Nov 2024 08:56:58 -0700 Subject: [PATCH] #54 --- id/54/54/journal.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/id/54/54/journal.json b/id/54/54/journal.json index 0f4be9eb..20dfcbc5 100644 --- a/id/54/54/journal.json +++ b/id/54/54/journal.json @@ -1 +1 @@ -[{"date":"2023-12-15T00:05:22Z","author":"dgelessus","fields":{"title":"Make Python.Cheat command more usable by not parsing its argument","body":"The argument is now always treated as a plain string and passed directly\nto the cheat. This is the behavior expected by all the functions in\nxCheat.py, which parse the string argument manually where needed.\n\nThe previous implementation evaluated the argument value as a Python\nexpression. This theoretically allowed passing non-string arguments, but\nnone of the cheats use this (and it\u0027s also a potential code execution\nissue). If no argument was passed, the function was called with no\narguments, which is also not supported by any of the cheats.\n\nIn practice, this required unintuitive syntax for calling the cheats\ncorrectly, for example:\n\n Python.Cheat GetPlayerID None\n Python.Cheat GetSDL \"\u0027FirstWeekClothing\u0027\"\n\nWith the new argument handling, these have been simplified to:\n\n Python.Cheat GetPlayerID\n Python.Cheat GetSDL FirstWeekClothing","status":"New","mergeTo":"master","type":"Proposal","watchers":"+dgelessus"},"patchset":{"number":1,"rev":1,"tip":"96facaa7bbcc477a4b75c5e5617fc10ac323a666","base":"883495c35ca8dd40bda4010c4734a3ad29e0078e","insertions":22,"deletions":35,"commits":1,"added":0,"type":"Proposal"}},{"date":"2024-03-06T17:32:40Z","author":"rarified","fields":{"status":"Open","watchers":"+rarified"}}] \ No newline at end of file +[{"date":"2023-12-15T00:05:22Z","author":"dgelessus","fields":{"title":"Make Python.Cheat command more usable by not parsing its argument","body":"The argument is now always treated as a plain string and passed directly\nto the cheat. This is the behavior expected by all the functions in\nxCheat.py, which parse the string argument manually where needed.\n\nThe previous implementation evaluated the argument value as a Python\nexpression. This theoretically allowed passing non-string arguments, but\nnone of the cheats use this (and it\u0027s also a potential code execution\nissue). If no argument was passed, the function was called with no\narguments, which is also not supported by any of the cheats.\n\nIn practice, this required unintuitive syntax for calling the cheats\ncorrectly, for example:\n\n Python.Cheat GetPlayerID None\n Python.Cheat GetSDL \"\u0027FirstWeekClothing\u0027\"\n\nWith the new argument handling, these have been simplified to:\n\n Python.Cheat GetPlayerID\n Python.Cheat GetSDL FirstWeekClothing","status":"New","mergeTo":"master","type":"Proposal","watchers":"+dgelessus"},"patchset":{"number":1,"rev":1,"tip":"96facaa7bbcc477a4b75c5e5617fc10ac323a666","base":"883495c35ca8dd40bda4010c4734a3ad29e0078e","insertions":22,"deletions":35,"commits":1,"added":0,"type":"Proposal"}},{"date":"2024-03-06T17:32:40Z","author":"rarified","fields":{"status":"Open","watchers":"+rarified"}},{"date":"2024-11-15T15:56:57Z","author":"rarified","fields":{"title":"closes #54","body":"","status":"Merged","mergeSha":"76ef5e01116fdc434ef32ff24a73c42f00a6ab8e","mergeTo":"master","responsible":"rarified"},"patchset":{"number":2,"rev":1,"tip":"76ef5e01116fdc434ef32ff24a73c42f00a6ab8e","base":"618fb8f13e7d4e8e75685b1ed9d2b7a476e31dc0","insertions":0,"deletions":0,"commits":1,"added":0,"type":"Rebase"}}] \ No newline at end of file