Repository navigation
Conversation
I translated some Japanese here.
|
|
Contributor
|
The translations are managed in transifex: https://www.transifex.com/wekan/wekan/dashboard/ |
Author
|
Oh. thanks for that. but, it looks like everything is translated already in transfix. |
|
Closing as we manage translations in Transifex. I released v0.11.0-rc11 which includes an up to date Japanese translation. |
xet7
added a commit
that referenced
this pull request
Nov 11, 2026
The fix for #601 passed the paths to `bash -c` as arguments ("$1", "$2") instead of pasting them into the script. That is safe in itself, but it still hands a temporary or checkout path to a shell, and CodeQL flagged js/shell-command-injection-from-environment again on the two umask tests in tests/releaseDownloads.test.cjs. Those tests no longer use a shell: fetch.sh runs as bash's program with its arguments, the umask is set on the test's own process around the call and put back, and `chmod +x` is fs.chmodSync. tests/macosSandbox.test.cjs, fixed the same way for #601, now runs ls and touch as programs of sandbox-exec, each path an argument. The guard (tests/testShellPathsFromEnv.test.cjs) now also refuses any value given to a shell's -c script as an argument - spawned or as a wrapper's program - and the one other test that did so, tests/dbConformanceWiring.test.cjs, passes its value in the environment. Run against the files as they were, it names all three; its pattern takes a backslash only as an escape, so a long file cannot make it backtrack. The findings were in tests, not in WeKan, so there is no attempt to show in Admin Panel -> Problems. Thanks to GitHub CodeQL and xet7 !
xet7
added a commit
that referenced
this pull request
Nov 11, 2026
…ser 5.12.0 for Dependabot alert #188. Thanks to GitHub CodeQL, dependabot and xet7 !
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
I translated some Japanese here.
This change is