From 967f78a66cd6cec9261fd74552796cfc2e594f6c Mon Sep 17 00:00:00 2001 From: Colin O'Dell Date: Sun, 2 Oct 2022 15:36:34 -0400 Subject: [PATCH] Escape metainfo to prevent bash syntax errors (#3328) --- recipe/deploy/release.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipe/deploy/release.php b/recipe/deploy/release.php index a82ed1bd8..6392b7ccd 100644 --- a/recipe/deploy/release.php +++ b/recipe/deploy/release.php @@ -130,8 +130,8 @@ ]; // Save metainfo about release. - $json = json_encode($metainfo); - run("echo '$json' >> .dep/releases_log"); + $json = escapeshellarg(json_encode($metainfo)); + run("echo $json >> .dep/releases_log"); // Make new release. run("mkdir -p $releasePath");