fix(deployment): properly escape shell arguments in railpack prepare command

This commit is contained in:
Andras Bacsai 2026-03-24 07:09:24 +01:00
parent 7dd648e549
commit 4afcbbb209

View file

@ -2454,13 +2454,13 @@ private function build_railpack_image(): void
$prepare_command .= " {$this->env_railpack_args}";
}
if ($this->application->build_command) {
$prepare_command .= " --build-cmd \"{$this->application->build_command}\"";
$prepare_command .= ' --build-cmd '.escapeShellValue($this->application->build_command);
}
if ($this->application->start_command) {
$prepare_command .= " --start-cmd \"{$this->application->start_command}\"";
$prepare_command .= ' --start-cmd '.escapeShellValue($this->application->start_command);
}
if ($this->application->install_command) {
$prepare_command .= " --env RAILPACK_INSTALL_CMD=\"{$this->application->install_command}\"";
$prepare_command .= ' --env '.escapeShellValue("RAILPACK_INSTALL_CMD={$this->application->install_command}");
}
$prepare_command .= " --plan-out /artifacts/railpack-plan.json {$this->workdir}";