Vote #81910
完了redmine computed custom field
ステータス:
Closed
優先度:
通常
担当者:
-
カテゴリ:
Custom fields_14
対象バージョン:
-
開始日:
2022/05/09
期日:
進捗率:
0%
予定工数:
Redmineorg_URL:
category_id:
14
version_id:
0
issue_org_id:
36992
author_id:
436434
assigned_to_id:
0
comments:
2
status_id:
5
tracker_id:
2
plus1:
0
affected_version:
closed_on:
affected_version_id:
journals
--------------------------------------------------------------------------------
The "plugin":https://github.com/dpalic/redmine_plugin_computed_custom_field (and its various forks) rely on administrators entering raw Ruby code which is then evaluated. This effectively results in the plugin being an unmitigated remote-code-execution vulnerability which goes against the security guarantees of Redmine.
As such, this plugin will never be part of Redmine and I would strongly recommend to not use it anywhere because of the incredible security risks it brings.
--------------------------------------------------------------------------------
related_issues
relates,New,1712,add custom fields that are calculations of other fields
いいね!0