Merge remote-tracking branch 'origin/category-annotation' into catego…

…ry-annotation
Polyfrost · Nov 24, 2023 · 2820720 · 2820720
2 parents 4b4e1ec + 8fefda5
commit 2820720
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/main/java/cc/polyfrost/oneconfig/renderer/TinyFD.java b/src/main/java/cc/polyfrost/oneconfig/renderer/TinyFD.java
@@ -5,6 +5,12 @@
 
 import java.io.File;
 
+/**
+ * API for TinyFD, a cross-platform file selection dialog.
+ * <p>
+ * On Linux, TinyFD "allows shell metacharacters in titles, messages, and other input data," meaning that it is vulnerable to command injection.
+ * **Treat all user input as untrusted and sanitize it before passing it to TinyFD.**
+ */
 @SuppressWarnings("unused")
 public interface TinyFD {
     String QUESTION_ICON = "question";