Joker linter executed project-local .jokerd/linter.* files during linting
In Joker versions before 1.8.2, joker –lint <file> located a .jokerd/ directory by walking up from the linted file and executed matching linter.* files from that directory before linting. Because these files are executable Joker/Clojure code, linting a file inside an untrusted repository could execute code supplied by that repository. This could be triggered by editor integrations or CI jobs that automatically run joker –lint on checked-out source code.