Exploiting workflows that insecurely interpolate user-controlled variables (such as a PR title) within a script
The pip thread also gets into the surprisingly fiddly business of parsing duration strings. ISO 8601 durations (P7D) are unambiguous but nobody wants to type them, human-readable strings like 7 days are friendly but need a parser that pip’s maintainers would rather not write and maintain, and variable-length calendar units like months and years require knowing which month you’re in to convert to a concrete number of days. uv went with ISO 8601 plus friendly strings but excluded months and years entirely, and pip’s maintainers are leaning toward just accepting a bare number of days, which covers nearly every real use case without dragging in leap year arithmetic.，详情可参考新收录的资料
回到北京后，高铭暄在医学院的院部机关做教务工作。他曾自我调侃：“刑法专业是搞不成了，以后就在院部机关混碗饭吃。”但在内心深处，高铭暄始终觉得自己是医学的外行，渴望回到法学的领域。。新收录的资料对此有专业解读
去年12月底至今年1月初的全國示威期間，許多人呼籲推翻他或要求他下台。