Fix potential shell command injection

uBlockOrigin · Dec 21, 2024 · 1208926 · 1208926
1 parent d5a665c
commit 1208926
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/on-issue-comment.yml b/.github/workflows/on-issue-comment.yml
@@ -10,10 +10,12 @@ jobs:
     permissions: write-all
     steps:
       - name: Delete comment
-        run: |
-          echo " ${{ github.event.comment.body }} "
-      - uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper@v3
         with:
           actions: 'delete-comment'
           token: ${{ secrets.GITHUB_TOKEN }}
-          comment-id: ${{ github.event.comment.id }}
+          comment-id: ${{ github.event.comment.id }}
+        env:
+          BODY: ${{ github.event.comment.body }}
+        run: |
+          echo " $BODY "