Closed timmc-edx closed 1 year ago
I haven't tested this, and I'm not sure if the output can contain anything usable in an exploit, but using env variables for untrusted input is recommended in general:
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#example-of-a-script-injection-attack
bundled your changes with #68, thanks!
I haven't tested this, and I'm not sure if the output can contain anything usable in an exploit, but using env variables for untrusted input is recommended in general:
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#example-of-a-script-injection-attack