fix(submission): prevent script injection

LizardByte · Jun 6, 2024 · a2c531b · a2c531b
1 parent b5f2afa
commit a2c531b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/auto-update-db.yml b/.github/workflows/auto-update-db.yml
@@ -56,8 +56,10 @@ jobs:
           template-path: .github/ISSUE_TEMPLATE/theme.yml
 
       - name: Crease JSON
+        env:
+          JSON_STRING: ${{ steps.issue-parser.outputs.jsonString }}
         run: |
-          echo '${{ steps.issue-parser.outputs.jsonString }}' > submission.json
+          echo ${JSON_STRING} > submission.json
 
       - name: Get Issue Author ID
         id: author