fix(previews): escape container names in stopContainers method to prevent shell injection vulnerabilities

2025-06-04 09:11:08 +02:00
parent ad98d135a1
commit 1704a25a24
1 changed files with 1 additions and 1 deletions
--- a/app/Livewire/Project/Application/Previews.php
+++ b/app/Livewire/Project/Application/Previews.php
@@ -247,7 +247,7 @@ class Previews extends Component
            $containerNames[] = str_replace('/', '', $container['Names']);
        }

-        $containerList = implode(' ', $containerNames);
+        $containerList = implode(' ', array_map('escapeshellarg', $containerNames));
        $commands = [
            "docker stop --time=$timeout $containerList",
            "docker rm -f $containerList",