Skip to content

Commit cc7c6c4

Browse files
committed
Use unsetenv_others: true to prevent leaking of system ENV variables, doh
1 parent a77e599 commit cc7c6c4

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

app/services/command_execution_service.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -300,7 +300,7 @@ def run_isolated_process
300300
end
301301

302302
def execute_command(env, command, buffer, error_buffer)
303-
Open3.popen3(env, command, chdir: @work_dir) do |stdin, stdout, stderr, wait_thr|
303+
Open3.popen3(env, command, chdir: @work_dir, unsetenv_others: true) do |stdin, stdout, stderr, wait_thr|
304304
@pid = wait_thr&.pid
305305

306306
stdout_thread = Thread.new do

0 commit comments

Comments
 (0)