neuwirth/levineuwirth.org
neuwirth
/
levineuwirth.org
1
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Quote rsync target variables in Makefile deploy 

A VPS_PATH containing whitespace or shell metacharacters would split
on the unquoted expansion and hand rsync extra arguments. The
existing VPS_PATH guard rejects obviously dangerous parents (/srv,
/var, etc.) but does not catch this. Quoting fails closed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Levi Neuwirth 2026-05-07 15:08:23 -04:00
parent c7a588d769
commit 339433db20
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Makefile
View File

@ -144,7 +144,7 @@ deploy: clean build sign
# fails (auth, branch protection, network), abort before touching # fails (auth, branch protection, network), abort before touching
# the VPS so the public source repo and the live site stay in sync. # the VPS so the public source repo and the live site stay in sync.
git push -u origin main git push -u origin main
rsync -avz --delete _site/ $(VPS_USER)@$(VPS_HOST):$(VPS_PATH)/ rsync -avz --delete _site/ "$(VPS_USER)@$(VPS_HOST):$(VPS_PATH)/"
watch: export SITE_ENV = dev watch: export SITE_ENV = dev
watch: watch: