Skip to content

Commit 13b5b55

Browse files
committed
fix: Commit messages aren't fully shell escaped
`app` , "test", 'foo' Signed-off-by: Minsu Lee <amond@amond.net>
1 parent 8ed64b8 commit 13b5b55

File tree

2 files changed

+6
-4
lines changed

2 files changed

+6
-4
lines changed

dist/index.js

+3-2
Original file line numberDiff line numberDiff line change
@@ -28333,6 +28333,8 @@ async function vercelDeploy(ref, commit) {
2833328333

2833428334
const providedArgs = vercelArgs.split(/ +/);
2833528335

28336+
const commitMessage = commit.replace("'", "'\\''");
28337+
2833628338
const args = [
2833728339
...vercelArgs.split(/ +/),
2833828340
...['-t', vercelToken],
@@ -28350,8 +28352,7 @@ async function vercelDeploy(ref, commit) {
2835028352
...addVercelMetadata('githubCommitRepo', context.repo.repo, providedArgs),
2835128353
...addVercelMetadata(
2835228354
'githubCommitMessage',
28353-
// eslint-disable-next-line prefer-template
28354-
'"' + commit + '"',
28355+
`'${commitMessage}'`,
2835528356
providedArgs,
2835628357
),
2835728358
...addVercelMetadata(

index.js

+3-2
Original file line numberDiff line numberDiff line change
@@ -117,6 +117,8 @@ async function vercelDeploy(ref, commit) {
117117

118118
const providedArgs = vercelArgs.split(/ +/);
119119

120+
const commitMessage = commit.replace("'", "'\\''");
121+
120122
const args = [
121123
...vercelArgs.split(/ +/),
122124
...['-t', vercelToken],
@@ -134,8 +136,7 @@ async function vercelDeploy(ref, commit) {
134136
...addVercelMetadata('githubCommitRepo', context.repo.repo, providedArgs),
135137
...addVercelMetadata(
136138
'githubCommitMessage',
137-
// eslint-disable-next-line prefer-template
138-
'"' + commit + '"',
139+
`'${commitMessage}'`,
139140
providedArgs,
140141
),
141142
...addVercelMetadata(

0 commit comments

Comments
 (0)