helm/pkg/plugin
Adam Reese 657ce552cb
fix(*): Validate metadata semver and printable characters
ref: https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx

* Skip invalid chart versions when reading the repository index file or
  when programmatically adding a chart version.
* Adds semver validation and strips non-printable characters and
  normalizes spaces for string fields in Metadata.Validate()
* Fixes a unit test that was pulling a remote repo.  Now uses a local
  repo.
* Fixes ignored error in repo update command

Signed-off-by: Adam Reese <adam@reese.io>
2021-02-04 12:52:24 -08:00
..
cache Updating the module for v3 as the major version 2019-10-03 14:27:05 -04:00
installer Cleanup tempfiles introduced by unit tests under pkg/ 2020-11-23 17:22:52 +08:00
testdata/plugdir switched to stricter YAML parsing on plugin metadata files 2020-09-17 11:38:28 -07:00
hooks.go Updating the module for v3 as the major version 2019-10-03 14:27:05 -04:00
plugin.go fix(*): Validate metadata semver and printable characters 2021-02-04 12:52:24 -08:00
plugin_test.go switched to stricter YAML parsing on plugin metadata files 2020-09-17 11:38:28 -07:00