Skip to content

Commit 3497037

Browse files
committed
SecFix: Do not expand shell glob characters when logging cmd arguments
1 parent 62201cf commit 3497037

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

func/main.sh

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,9 +51,10 @@ new_timestamp() {
5151
}
5252

5353
# Event string for logger
54+
ARGS=("$@")
5455
for ((I=1; I <= $# ; I++)); do
5556
if [[ "$HIDE" != $I ]]; then
56-
ARGUMENTS="$ARGUMENTS '$(eval echo \$${I})'"
57+
ARGUMENTS="$ARGUMENTS '${ARGS[${I}-1]}'"
5758
else
5859
ARGUMENTS="$ARGUMENTS '******'"
5960
fi

0 commit comments

Comments
 (0)