tiennm99/coolify
1
0
Fork 0
mirror of https://github.com/tiennm99/coolify.git synced 2026-08-20 10:23:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/next' into harden-database-import-files

Browse Source
This commit is contained in:
Andras Bacsai
2026-06-29 10:35:35 +02:00
parent 2d63d51237 f4c863bc34
commit 7d65a4b496
550 changed files with 18078 additions and 5008 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/Unit/DatabaseBackupSecurityTest.php
+1 -1
View File
@@ -182,7 +182,7 @@ test('escapeshellarg neutralizes command injection in mariadb password', functio
$escaped = escapeshellarg($maliciousPassword);
// Single quotes in the value get escaped as '\''
expect($escaped)->toBe("'pass'\\'''; whoami; echo '\\'''");
expect($escaped)->toBe("'pass'\\''; whoami; echo '\\'''");
$command = "docker exec container mariadb-dump -u root -p$escaped db";
// Verify the command doesn't contain an unescaped semicolon outside quotes
expect($command)->toContain("-p'pass'");