This is an automated email from the ASF dual-hosted git repository. GitToTheHub pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/cordova-paramedic.git
commit 13ddd8bc4dd06999c90731d4e462f1e98eb2094c Merge: a18c0a5 a77e6f4 Author: Manuel Beck <[email protected]> AuthorDate: Wed Jul 29 20:57:39 2026 +0200 chore(ios-permissions): defensive SQL escaping for TCC permission updates - The ParamediciOSPermissions.js module constructs SQL INSERT and UPDATE statements using template literal string interpolation with the ${service} and ${app} variables. These variables are passed to the sqlite3 command-line tool without parameterisation or escaping, allowing SQL injection if an attacker controls these parameters. - Automated security fix generated by OrbisAI Security Generated-By: Claude Sonnet 4.6 lib/ParamediciOSPermissions.js | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
