Escape metainfo to prevent bash syntax errors (deployphp#3328)

integer-net · Oct 31, 2022 · 967f78a · 967f78a
1 parent ff9dc87
commit 967f78a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/recipe/deploy/release.php b/recipe/deploy/release.php
@@ -130,8 +130,8 @@
     ];
 
     // Save metainfo about release.
-    $json = json_encode($metainfo);
-    run("echo '$json' >> .dep/releases_log");
+    $json = escapeshellarg(json_encode($metainfo));
+    run("echo $json >> .dep/releases_log");
 
     // Make new release.
     run("mkdir -p $releasePath");