Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Y24-246 - [BUG] Backticks cause issue generator action to exit prematurely #9

Closed
SHIV5T3R opened this issue Aug 13, 2024 · 0 comments
Closed
Assignees
Labels
bug Something isn't working

Comments

@SHIV5T3R
Copy link
Member

SHIV5T3R commented Aug 13, 2024

Describe the bug
When creating an issue, there is an action that will prepend the issue name with an automatically generated story number. If there is a backtick (and potentially other special characters), the action will exit before completion.

To Reproduce
Steps to reproduce the behaviour:

  1. Create an issue with opening and closing backticks.

    Example
    Screenshot 2024-08-13 at 16 01 40

  2. Go to actions and click the most relevant run

  3. You will notice that the action didn't run

Expected behaviour
The action should escape this and prepend a string.

Additional context
This is also a (very minor) security vulnerability because it will attempt to run the string within the backticks as if it was a command.

@SHIV5T3R SHIV5T3R added the bug Something isn't working label Aug 13, 2024
@psd-issuer psd-issuer bot changed the title [BUG] Special characters (backticks) cause issue generator action to exit prematurely Y24-246 - [BUG] Special characters (backticks) cause issue generator action to exit prematurely Aug 13, 2024
@SHIV5T3R SHIV5T3R changed the title Y24-246 - [BUG] Special characters (backticks) cause issue generator action to exit prematurely Y24-246 - [BUG] Backticks cause issue generator action to exit prematurely Aug 21, 2024
@SHIV5T3R SHIV5T3R self-assigned this Aug 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants