diff options
| author | Carlo Sala <carlosalag@protonmail.com> | 2024-08-02 17:00:55 +0200 |
|---|---|---|
| committer | Carlo Sala <carlosalag@protonmail.com> | 2024-08-02 17:00:55 +0200 |
| commit | 3b5f018f7025a347e4888408b566caeaef2fabd7 (patch) | |
| tree | daf2807d3714f8c355f56f18e5eef408c8f407a1 | |
| parent | 2cb403e89f618548b340181b5690639768305aad (diff) | |
| download | zsh-3b5f018f7025a347e4888408b566caeaef2fabd7.tar.gz zsh-3b5f018f7025a347e4888408b566caeaef2fabd7.tar.bz2 zsh-3b5f018f7025a347e4888408b566caeaef2fabd7.zip | |
fix(toolbox): avoid prompt injection
| -rw-r--r-- | plugins/toolbox/toolbox.plugin.zsh | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/plugins/toolbox/toolbox.plugin.zsh b/plugins/toolbox/toolbox.plugin.zsh index 031c0f754..b9a594c09 100644 --- a/plugins/toolbox/toolbox.plugin.zsh +++ b/plugins/toolbox/toolbox.plugin.zsh @@ -3,7 +3,9 @@ function toolbox_prompt_info() { } function toolbox_prompt_name() { - [[ -f /run/.containerenv ]] && cat /run/.containerenv | awk -F\" '/name/ { print$2 }' + [[ -f /run/.containerenv ]] || return + local _to_print="$(cat /run/.containerenv | awk -F\" '/name/ { print$2 }')" + echo ${_to_print:gs/%/%%} } alias tbe="toolbox enter" |