)]}' { "commit": "20c637a6d25ccd5effc0e557a1b6316d6f175b62", "tree": "928acf4d8d6386c32c14ccf2ad78dfb6c43b1ac8", "parents": [ "c7c14fdad0cfba8386689cb2468d8ddc21d9cb1b" ], "author": { "name": "Marcel van Lohuizen", "email": "mpvl@golang.org", "time": "Sat Sep 12 23:04:15 2020 +0200" }, "committer": { "name": "Marcel van Lohuizen", "email": "mpvl@golang.org", "time": "Wed Sep 16 13:08:32 2020 +0000" }, "message": "cue/load: relax places where @tag is allowed\n\nCurrently @tag can already be arbitrarily nested.\nThis now also allows embeddings. It now explicitly\ndisallows fields defined within lists or the scope of\nan optional field in the help. It also reports an error\nfor invalid tag attributes.\n\nThese restrictions avoid an injection from being spread\nto widely by being generated, which may increase the\nability to analyze a configuration. But if these restrictions\nprove to be too cumbersome, they could be removed.\n\nCloses #437\n\nChange-Id: I3af3a49adb20e67fcce7c6693d40bfd14aa8eb0b\nReviewed-on: https://cue-review.googlesource.com/c/cue/+/7082\nReviewed-by: Marcel van Lohuizen \u003cmpvl@golang.org\u003e\n", "tree_diff": [ { "type": "modify", "old_id": "399d5450a1c6b42c31de6f3e5334fe3f743d3c1a", "old_mode": 33188, "old_path": "cmd/cue/cmd/help.go", "new_id": "67ec1397620184e1a42c887eddd59e5ffa0c0c40", "new_mode": 33188, "new_path": "cmd/cue/cmd/help.go" }, { "type": "add", "old_id": "0000000000000000000000000000000000000000", "old_mode": 0, "old_path": "/dev/null", "new_id": "b2f44039edb14918386c650c6edac8c52207f07f", "new_mode": 33188, "new_path": "cmd/cue/cmd/testdata/script/inject.txt" }, { "type": "add", "old_id": "0000000000000000000000000000000000000000", "old_mode": 0, "old_path": "/dev/null", "new_id": "f9bd8579bf28574fd9e544bd8fdb68e0ccbf5172", "new_mode": 33188, "new_path": "cmd/cue/cmd/testdata/script/injecterr.txt" }, { "type": "modify", "old_id": "d30b502fd555de00bfb7ba7377e1997c73c0113b", "old_mode": 33188, "old_path": "cue/load/tags.go", "new_id": "1417c0bc29165a7556b55cc6cae4b57679089fb7", "new_mode": 33188, "new_path": "cue/load/tags.go" } ] }