Diskussionen » Greasy Fork镜像 Rückmeldungen

jsdeliver regex is broken

§
Veröffentlicht: 12.10.2020

The current one:

^(https?:)?//cdn\.jsdelivr\.net/gh/[^/]+/[^/@]+@[a-f0-9]{40}

I guess it should be:

^(https?:)?//cdn\.jsdelivr\.net/gh/[^/]+/[^/@]+@[a-f0-9\.]{1,40}\/.*

This also allows version number like 'v1.0'

woxxomMod
§
Veröffentlicht: 13.10.2020
Bearbeitet: 13.10.2020

A version tag can be switched easily to any other commit by the repository's maintainer so it can't be allowed on GreasyFork if I understand the purpose of the external code policy correctly which is to prevent covert code change after the user inspected the external code at installation/update.

woxxomMod
§
Veröffentlicht: 13.10.2020

BTW, @JasonBarnabe, did you decide to not recreate our mod-only forum because you think it's not useful?

Antwort schreiben

Anmelden um eine Antwort zu senden.

长期地址
遇到问题?请前往 GitHub 提 Issues。