Prevent command execution by substituting ` for ' (#4)

tomwhross · Sep 15, 2021 · 68706f7 · 68706f7
1 parent d8bc5ef
commit 68706f7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/entrypoint.sh b/entrypoint.sh
@@ -10,6 +10,9 @@ fi
 
 header=$'Here are some friendly prose warnings from [`write-good`](https://github.com/btford/write-good):\n'
 
+# prevent command execution by substituting ` for '
+result=$(echo "$result" | sed "s/\`/'/g")
+
 result=$header$'```\n'$result$'\n```'
 
 # add support for multiline output