notepad-plus-plus

Commit Graph

Author	SHA1	Message	Date
Don Ho	686bf4fba1	Fix security flaw issue There's a security flaw for the un-installation of Notepad++ in Windows Register, the string without quotes: C:\Program Files\Notepad++\uninstall.exe, whereas it should be "C:\Program Files\Notepad++\uninstall.exe". The reason is, hacker can create a file called c:\program.exe, then Windows could interpret Files\Notepad++\uninstall.exe as the argument, so the system could run c:\program.exe. Ref: https://isc.sans.edu/diary/Help+eliminate+unquoted+path+vulnerabilities/14464 Fixed by @ozone10: Fix #10191, fix #6165, close #10369	3 years ago
Don HO	ab5c1d3e2a	Upgrade Notepad++ License Update GPL version from v2 to v3. Fix #9425, close #9441	4 years ago
Don HO	3aaf083c1d	Add unit tests for function list feature go to notepad-plus-plus\PowerEditor\Test\FunctionList directory then launch the following commands: powershell ./unitTestLauncher.ps1	7 years ago

Author

SHA1

Message

Date

Don Ho

686bf4fba1

Fix security flaw issue

There's a security flaw for the un-installation of Notepad++ in Windows Register, the string without quotes:
C:\Program Files\Notepad++\uninstall.exe, whereas it should be "C:\Program Files\Notepad++\uninstall.exe".
The reason is, hacker can create a file called c:\program.exe, then Windows could interpret Files\Notepad++\uninstall.exe as the argument, so the system could run c:\program.exe. Ref:
https://isc.sans.edu/diary/Help+eliminate+unquoted+path+vulnerabilities/14464

Fixed by @ozone10:

Fix #10191, fix #6165, close #10369

Don HO

ab5c1d3e2a

Upgrade Notepad++ License

Update GPL version from v2 to v3.

Fix #9425, close #9441

Don HO

3aaf083c1d

Add unit tests for function list feature

go to notepad-plus-plus\PowerEditor\Test\FunctionList directory then
launch the following commands:
powershell ./unitTestLauncher.ps1

3 Commits (2556c1e56a19d319987e21dc17c5d020c0b9bea4)