Eliminated potential for malicious code injection

adamlui · Aug 14, 2024 · 58875a8 · 58875a8
1 parent c5033d2
commit 58875a8
Show file tree

Hide file tree

Showing 13 changed files with 101 additions and 23 deletions.
diff --git a/.github/workflows/sync-amazongpt-changes.yml b/.github/workflows/sync-amazongpt-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/amazongpt/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/amazongpt/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to KudoAI/amazongpt
         run: |
           cd ${{ github.workspace }}/KudoAI/amazongpt
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/amazongpt\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/amazongpt\`]" || true
           git push
diff --git a/.github/workflows/sync-autoclear-chatgpt-history-changes.yml b/.github/workflows/sync-autoclear-chatgpt-history-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/autoclear-chatgpt-history/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/autoclear-chatgpt-history/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/autoclear-chatgpt-history
         run: |
           cd ${{ github.workspace }}/adamlui/autoclear-chatgpt-history
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/autoclear-chatgpt-history\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/autoclear-chatgpt-history\`]" || true
           git push
diff --git a/.github/workflows/sync-bravegpt-changes.yml b/.github/workflows/sync-bravegpt-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/bravegpt/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/bravegpt/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to KudoAI/bravegpt
         run: |
           cd ${{ github.workspace }}/KudoAI/bravegpt
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/bravegpt\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/bravegpt\`]" || true
           git push
diff --git a/.github/workflows/sync-chatgpt-auto-continue-changes.yml b/.github/workflows/sync-chatgpt-auto-continue-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/chatgpt-auto-continue/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/chatgpt-auto-continue/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/chatgpt-auto-continue
         run: |
           cd ${{ github.workspace }}/adamlui/chatgpt-auto-continue
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-auto-continue\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-auto-continue\`]" || true
           git push
diff --git a/.github/workflows/sync-chatgpt-auto-refresh-changes.yml b/.github/workflows/sync-chatgpt-auto-refresh-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/chatgpt-auto-refresh/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/chatgpt-auto-refresh/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/chatgpt-auto-refresh
         run: |
           cd ${{ github.workspace }}/adamlui/chatgpt-auto-refresh
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-auto-refresh\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-auto-refresh\`]" || true
           git push
diff --git a/.github/workflows/sync-chatgpt-auto-talk-changes.yml b/.github/workflows/sync-chatgpt-auto-talk-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/chatgpt-auto-talk/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/chatgpt-auto-talk/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/chatgpt-auto-talk
         run: |
           cd ${{ github.workspace }}/adamlui/chatgpt-auto-talk
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-auto-talk\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-auto-talk\`]" || true
           git push
diff --git a/.github/workflows/sync-chatgpt-infinity-changes.yml b/.github/workflows/sync-chatgpt-infinity-changes.yml
@@ -53,13 +53,19 @@ jobs:
               "${{ github.workspace }}/adamlui/chatgpt-apps/chatgpt-infinity/$browser/extension/_locales/"
           done
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/chatgpt-infinity
         run: |
           cd ${{ github.workspace }}/adamlui/chatgpt-infinity
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-infinity\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-infinity\`]" || true
           git push
diff --git a/.github/workflows/sync-chatgpt-widescreen-changes.yml b/.github/workflows/sync-chatgpt-widescreen-changes.yml
@@ -53,13 +53,19 @@ jobs:
               "${{ github.workspace }}/adamlui/chatgpt-apps/chatgpt-widescreen/$browser/extension/_locales/"
           done
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/chatgpt-widescreen
         run: |
           cd ${{ github.workspace }}/adamlui/chatgpt-widescreen
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-widescreen\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/chatgpt-widescreen\`]" || true
           git push
diff --git a/.github/workflows/sync-duckduckgpt-changes.yml b/.github/workflows/sync-duckduckgpt-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/duckduckgpt/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/duckduckgpt/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to KudoAI/duckduckgpt
         run: |
           cd ${{ github.workspace }}/KudoAI/duckduckgpt
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/duckduckgpt\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/duckduckgpt\`]" || true
           git push
diff --git a/.github/workflows/sync-github-star-history-changes.yml b/.github/workflows/sync-github-star-history-changes.yml
@@ -37,11 +37,17 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/github/github-star-history/ \
             ${{ github.workspace }}/adamlui/github-star-history/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/github-star-history
         run: |
           cd ${{ github.workspace }}/adamlui/github-star-history
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
diff --git a/.github/workflows/sync-github-widescreen-changes.yml b/.github/workflows/sync-github-widescreen-changes.yml
@@ -37,11 +37,17 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/github/github-widescreen/ \
             ${{ github.workspace }}/adamlui/github-widescreen/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/github-widescreen
         run: |
           cd ${{ github.workspace }}/adamlui/github-widescreen
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
diff --git a/.github/workflows/sync-googlegpt-changes.yml b/.github/workflows/sync-googlegpt-changes.yml
@@ -53,13 +53,19 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/chatgpt/googlegpt/ \
             ${{ github.workspace }}/adamlui/chatgpt-apps/googlegpt/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to KudoAI/googlegpt
         run: |
           cd ${{ github.workspace }}/KudoAI/googlegpt
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push
 
       - name: Push changes to adamlui/chatgpt-apps
@@ -68,5 +74,5 @@ jobs:
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts/chatgpt/googlegpt\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts/chatgpt/googlegpt\`]" || true
           git push
diff --git a/.github/workflows/sync-youtube-classic-changes.yml b/.github/workflows/sync-youtube-classic-changes.yml
@@ -37,11 +37,17 @@ jobs:
             ${{ github.workspace }}/adamlui/userscripts/youtube-classic/ \
             ${{ github.workspace }}/adamlui/youtube-classic/greasemonkey/
 
+      - name: Escape backticks in commit msg
+        env:
+          COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          echo "ESCAPED_MSG=$(echo "$COMMIT_MSG" | sed 's/`/\`/g')" >> $GITHUB_ENV
+
       - name: Push changes to adamlui/youtube-classic
         run: |
           cd ${{ github.workspace }}/adamlui/youtube-classic
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
           git add .
-          git commit -n -m "$(echo '${{ github.event.head_commit.message }}' | sed 's/`/\`/g') ↞ [auto-sync from \`adamlui/userscripts\`]" || true
+          git commit -n -m "ESCAPED_MSG ↞ [auto-sync from \`adamlui/userscripts\`]" || true
           git push