Skip to content

Commit

Permalink
check env var escape
Browse files Browse the repository at this point in the history
  • Loading branch information
Integralist committed Jul 11, 2024
1 parent c16caaf commit e0b6d0d
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions .github/workflows/push.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@ jobs:
outputs:
continue: "true"
steps:
# validate escaping env var so it's LITERALLY sent as `${SOME_ENVVAR}`.
# This is so the application handling the request will replace that with an env var value.
- run: echo curl -LsD - "https://www.example.com/data?location=https://\$${SOME_ENVVAR}@data.example.com/example.zip"

- run: |
echo foo
# simulate an error
Expand Down

0 comments on commit e0b6d0d

Please sign in to comment.