diff --git a/packages/server/src/utils/providers/utils.ts b/packages/server/src/utils/providers/utils.ts index ff82a6b11..5572df53c 100644 --- a/packages/server/src/utils/providers/utils.ts +++ b/packages/server/src/utils/providers/utils.ts @@ -1,10 +1,6 @@ import { quote } from "shell-quote"; -/** - * Escapes a single value so it can be safely interpolated as one argument into - * a `/bin/sh -c` command string (both local `execAsync` and remote SSH - * `execAsyncRemote`). User-controlled fields such as git URLs, branch names, - * repository owners and SSH hostnames must never reach a shell unescaped. - */ +// Escapes a value so it is safe to interpolate as a single argument into a +// /bin/sh -c command string (local execAsync and remote SSH execAsyncRemote). export const shellWord = (value: string | number | null | undefined): string => quote([String(value ?? "")]);