1
0
Fork 0
mirror of https://github.com/romkatv/powerlevel10k.git synced 2024-12-22 23:21:57 +00:00
The branch name must not be expanded.
This commit is contained in:
Dominik Ritter 2018-11-15 13:12:37 +01:00
parent 1b7e41964c
commit 24818eff79

View file

@ -496,7 +496,7 @@ function testBranchNameScriptingVulnerability() {
echo "#!/bin/sh\n\necho 'hacked'\n" > evil_script.sh echo "#!/bin/sh\n\necho 'hacked'\n" > evil_script.sh
chmod +x evil_script.sh chmod +x evil_script.sh
git checkout -b "$(./evil_script.sh)" 2>/dev/null git checkout -b '$(./evil_script.sh)' 2>/dev/null
git add . 2>/dev/null git add . 2>/dev/null
git commit -m "Initial commit" >/dev/null git commit -m "Initial commit" >/dev/null