`3b5f018f7025a347e4888408b566caeaef2fabd7`

Author: Carlo Sala <carlosalag@protonmail.com>
Committer: Carlo Sala <carlosalag@protonmail.com>
Date: 2024-08-02 15:00 UTC

Message

fix(toolbox): avoid prompt injection

Diff

 1diff --git a/plugins/toolbox/toolbox.plugin.zsh b/plugins/toolbox/toolbox.plugin.zsh
 2index 031c0f7540a69d8e142e1043f43eaf3c4b1796a5..b9a594c09661f94dbab697165f873054d891b31d 100644
 3--- a/plugins/toolbox/toolbox.plugin.zsh
 4+++ b/plugins/toolbox/toolbox.plugin.zsh
 5@@ -3,7 +3,9 @@ function toolbox_prompt_info() {
 6 }
 7 
 8 function toolbox_prompt_name() {
 9-  [[ -f /run/.containerenv ]] && cat /run/.containerenv | awk -F\" '/name/ { print$2 }'
10+  [[ -f /run/.containerenv ]] || return
11+  local _to_print="$(cat /run/.containerenv | awk -F\" '/name/ { print$2 }')"
12+  echo ${_to_print:gs/%/%%}
13 }
14 
15 alias tbe="toolbox enter"