Prevent HTML injection (#812)

* Prevent HTML injection * Update cnb.yaml --------- Co-authored-by: Deeka Wong <[email protected]>
friendsofhyperf · Dec 23, 2024 · 5c534f7 · 5c534f7
1 parent cacc58c
commit 5c534f7
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 6 deletions.
diff --git a/.github/workflows/cnb.yaml b/.github/workflows/cnb.yaml
@@ -13,10 +13,5 @@ jobs:
           SOURCE_REPO: 'https://github.com/friendsofhyperf/components.git'
           DESTINATION_REPO: 'https://cnb:${{ secrets.CNB_TOKEN }}@cnb.cool/friendsofhyperf/components.git'
         run: |
-          # git clone --mirror "$SOURCE_REPO" && cd `basename "$SOURCE_REPO"`
-          # git remote set-url --push origin "$DESTINATION_REPO"
-          # git fetch -p origin
-          # git for-each-ref --format 'delete %(refname)' refs/pull | git update-ref --stdin
-          # git push --mirror
           git clone --mirror "$SOURCE_REPO" && cd `basename "$SOURCE_REPO"`
           git push -f --prune "$DESTINATION_REPO" "refs/heads/*:refs/heads/*" "refs/tags/*:refs/tags/*"
diff --git a/src/web-tinker/src/Tinker.php b/src/web-tinker/src/Tinker.php
@@ -127,6 +127,6 @@ protected function cleanOutput(string $output): string
         // Remove ANSI color codes
         $output = preg_replace('/\e\[[0-9;]*m/', '', $output);
 
-        return trim($output);
+        return htmlentities($output);
     }
 }