From 24aff62c3b37732cf561420cee4062b84da037cb Mon Sep 17 00:00:00 2001 From: Tanny Date: Tue, 8 Sep 2026 09:58:14 +0200 Subject: [PATCH] Prevent parameter expansion and command substitution on env names and values. --- src/task/setono_dotenv.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/task/setono_dotenv.php b/src/task/setono_dotenv.php index 7e6b694..0e39e09 100644 --- a/src/task/setono_dotenv.php +++ b/src/task/setono_dotenv.php @@ -148,7 +148,7 @@ * This will generate a $command variable that will save a multiline text into a file * See https://stackoverflow.com/questions/10969953/how-to-output-a-multiline-string-in-bash */ - $command = "cat < {{release_path}}/.env.{{stage}}.local\n"; + $command = "cat <<'EOT' > {{release_path}}/.env.{{stage}}.local\n"; foreach ($overriddenValues as $key => $val) { $command .= $key . '=' . $val . "\n"; }