72928432f1
fix(plugins): fix potential command injection in `rand-quote` and `hitokoto`
...
The `rand-quote` plugin uses quotationspage.com and prints part of its content to the
shell without sanitization, which could trigger command injection. There is no evidence
that this has been exploited, but this commit removes all possibility for exploit.
Similarly, the `hitokoto` plugin uses the hitokoto.cn website to print quotes to the
shell, also without sanitization. Furthermore, there is also no evidence that this has
been exploited, but with this change it is now impossible.
2021-11-11 22:45:24 +01:00
a263cdac9c
fix(lib): fix potential command injection in `title` and `spectrum` functions
...
The `title` function unsafely prints its input without sanitization, which if used
with custom user code that calls it, it could trigger command injection.
The `spectrum_ls` and `spectrum_bls` could similarly be exploited if a variable is
changed in the user's shell environment with a carefully crafted value. This is
highly unlikely to occur (and if possible, other methods would be used instead),
but with this change the exploit of these two functions is now impossible.
2021-11-11 22:45:11 +01:00
06fc5fb129
fix(dirhistory): fix unsafe eval bug in back and forward widgets
...
The plugin unsafely processes directory paths in pop_past and pop_future.
This commit fixes that.
2021-11-11 22:44:28 +01:00
6cb41b70a6
fix(lib): fix `omz_urldecode` unsafe eval bug
...
The `omz_urldecode` function uses an eval to decode the input which can be
exploited to inject commands. This is used only in the svn plugin and it
requires a complex process to exploit, so it is highly unlikely to have been
used by an attacker.
2021-11-11 22:44:18 +01:00
1448d234d6
fix(dirhistory): fix Up/Down key bindings for Terminal.app
...
Reference: https://github.com/ohmyzsh/ohmyzsh/commit/7f49494#commitcomment-60117011
2021-11-11 17:20:07 +01:00
22de1d304c
fix(command-not-found): pass arguments correctly in Termux ( #10403 )
2021-11-10 15:03:38 +01:00
1d166eaaa1
fix(cli): avoid `git -C` for compatibility with git < v1.8.5 ( #10404 )
2021-11-10 11:35:17 +01:00
e3f7b8aa57
fix(updater): avoid `git -C` for compatibility with git < v1.8.5 ( #10404 )
...
Fixes #10404
2021-11-10 11:21:59 +01:00
db19589fcf
refactor(updater): simplify check for available updates
2021-11-09 19:56:53 +01:00
5c2440cb0c
style(frontend-search): rename completion file to `_frontend`
2021-11-09 12:07:23 +01:00
9a11b34101
fix(cli): fix check for completion files in `omz plugin load`
2021-11-09 12:03:59 +01:00
3dc66bd367
fix(emotty): fix glyphs output width in emotty theme
2021-11-09 10:25:23 +01:00
4a74349635
feat(refined): allow selecting git branch by changing prefix to `:` ( #10400 )
2021-11-09 09:50:25 +01:00
e86c6f5e7f
style: use `-n` flag in `head` and `tail` commands ( #10391 )
...
Co-authored-by: Marc Cornellà <hello@mcornella.com>
2021-11-09 09:04:10 +01:00
55682e3692
feat(tmux): set session name with `ZSH_TMUX_DEFAULT_SESSION_NAME` ( #9063 )
2021-11-08 15:32:09 +01:00
90903779b9
refactor(percol): fix style, bind keys for vi-mode and remove dependencies
2021-11-08 14:01:34 +01:00
b2f35a7b98
refactor(osx): Rename osx plugin to macos ( #10341 )
...
Apple changed the name of their operating system from OS X to macOS a number of years ago. This was overdue!
As per issue #10311
* refactor(osx): rename `osx` plugin to `macos`
* refactor(macos): Add symbolic link from old `osx` plugin name.
2021-11-05 16:40:38 -07:00
7a2cb10625
fix(updater): stop update if connection unavailable
2021-11-05 19:47:29 +01:00
0520c2e309
docs: add Security Policy
2021-11-03 18:21:04 +01:00
9a02515c7c
fix(command-not-found): pass arguments correctly in NixOS ( #10381 )
2021-11-03 13:17:23 +01:00
5e8905b4b2
feat(ys): increase color contrast with light color schemes ( #10295 )
2021-11-02 19:40:40 +01:00
79cf4b3ceb
feat(dirhistory): support urxvt terminal key binding ( #8370 )
...
Closes #8370
2021-11-02 15:12:43 +01:00
7f494944e6
fix(dirhistory): fix ALT+Up/Down key bindings for Terminal.app
2021-11-02 15:12:43 +01:00
49458b872d
docs(dirhistory): document OPT key alternative for macOS and fix style
...
Fixes #10350
2021-11-02 15:12:43 +01:00
bf88ff3f90
fix(lib): fix `1` alias to `cd` to directory 1 in stack ( #10370 )
2021-11-02 12:05:37 +01:00
04c96e235f
chore: fix grammar mistake in `CONTRIBUTING.md` ( #10362 )
2021-10-30 13:20:30 +02:00
1861b5f175
feat(xcode): support `Package.swift` as project file in `xc` ( #10358 )
2021-10-29 17:40:23 +02:00
2e46b2a2dc
feat(fzf): support getting fzf from nix-darwin ( #10355 )
2021-10-27 11:40:09 +02:00
1dba112041
fix(changelog): fix for `${(@ps:$sep:)var}` construct in zsh < 5.0.8
...
In recent zsh versions, `${(@ps:$sep:)var}` where $sep is a variable containing
a separator string and $var is a string with multiple values separated by $sep,
the `p` flag makes zsh correctly expand $sep before splitting $var. In versions
older than 5.0.8, this doesn't happen, so we use `eval` to get the same effect.
2021-10-27 10:12:23 +02:00
4b3a5c5411
fix(changelog): fix percent escapes in `printf` calls
2021-10-26 21:04:02 +02:00
0267cb89eb
perf(changelog): use regex-match instead of `sed` to parse commit subjects
2021-10-26 21:04:01 +02:00
140bfa8432
fix(changelog): go back to ignoring commits from merged branches
2021-10-26 21:04:01 +02:00
9c8131e417
perf(changelog): use a single `git log` command to get all commit messages
2021-10-26 21:04:00 +02:00
4f67b02a9f
feat(mix): update `mix` commands and descriptions ( #10273 )
2021-10-26 16:07:46 +02:00
c2b9ae2937
fix(changelog): don't show more than 40 commits ( #10345 )
...
Fixes #10345
2021-10-26 13:23:07 +02:00
1e5e834e0f
fix(cli): exit `omz update` with correct error code ( #10342 )
2021-10-25 20:28:22 +02:00
f1dd97bb2a
fix(ssh-agent): fix check for running `ssh-agent` process with hidepid /proc ( #8492 )
...
Fixes #8492
2021-10-23 05:16:15 +02:00
46f8765f4c
feat(osx): add `freespace` command to clean purgeable disk space ( #8762 )
...
Co-authored-by: Marc Cornellà <hello@mcornella.com>
2021-10-20 22:58:28 +02:00
8c1495a18e
fix(ruby)!: rename aliases that start with `g` to `ge`
...
BREAKING CHANGE: all `gem` aliases that started with `g` now start
with `ge` to fix conflicting names with the `git` plugin. Also, the
`ghlp` alias is now renamed `geh`. Have a look at the plugin README
for more information.
Fixes #10320
2021-10-20 17:11:42 +02:00
4b1f6d638f
feat(ruby): add multiple `gem` aliases ( #9005 )
...
Mostly empty commit to fix the changelog for merge at 6f4c7f64
2021-10-19 20:07:40 +02:00
6f4c7f6440
Merge branch 'royninja-patch-1'
2021-10-19 10:55:16 -07:00
f83bb65d47
Swapping gh with ghlp as 'gh' is reserved for the Github CLI. #9005
2021-10-19 10:54:50 -07:00
a6b5aede81
Merge branch 'patch-1' of https://github.com/royninja/ohmyzsh into royninja-patch-1
2021-10-19 10:54:30 -07:00
75fe22b405
docs(README): document new `zstyle` update settings ( #10304 )
...
Co-authored-by: Marc Cornellà <hello@mcornella.com>
2021-10-18 19:58:25 +02:00
19f9b6f1ad
feat(updater): add support for terminal hyperlinks
2021-10-13 11:58:56 +02:00
dbf555438e
feat(obraun): display time with leading zeros ( #10289 )
2021-10-13 10:00:46 +02:00
beeda72826
fix(ssh-agent): fix for bad `zstyle` command argument
...
Fixes #10282
2021-10-11 15:22:03 +02:00
a0ac789f2a
feat(ssh-agent): allow lazy-loading SSH identities ( #6309 )
...
Fixes #7477
2021-10-11 12:15:47 +02:00
9bd0ac9b00
feat(mvn): support using `mvnw` in multi-module projects ( #9413 )
2021-10-11 11:40:17 +02:00
f82aa81931
fix(lib): fix `diff --color` argument check for BSD systems ( #10269 )
2021-10-10 19:15:24 +02:00
Marc Cornellà