Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(client/electron/windows): double quote full path of OutlineService (
#1918) Double quote the path of `OutlineService.exe` in Windows service installation script to prevent a potential vulnerability discovered by a user's internal scanner below; in addition, this will also allow us to [add arguments to the service command](https://stackoverflow.com/a/11084834) in the future. #### References Unquoted Search Path or Element is vulnerable: - https://cwe.mitre.org/data/definitions/428.html - https://isc.sans.edu/diary/Help+eliminate+unquoted+path+vulnerabilities/14464 - http://www.ryanandjeffshow.com/blog/2013/04/11/powershell-fixing-unquoted-service-paths-complete/
- Loading branch information