From 49e78d7d0423363e376a816fc49a1e4f9e99fbd4 Mon Sep 17 00:00:00 2001 From: Kyle Spier-Swenson Date: Wed, 11 May 2016 15:54:21 -0700 Subject: [PATCH] Fixes the changelog processor not escaping usernames. (#17486) --- tools/github_webhook_processor.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/github_webhook_processor.php b/tools/github_webhook_processor.php index d471f57f9e6..766f0310302 100644 --- a/tools/github_webhook_processor.php +++ b/tools/github_webhook_processor.php @@ -250,7 +250,7 @@ function checkchangelog($payload, $merge = false) { if (!count($changelogbody)) return; - $file = 'author: '.$username."\n"; + $file = 'author: '.trim(str_replace(array("\\", '"'), array("\\\\", "\\\""), $username))."\n"; $file .= "delete-after: True\n"; $file .= "changes: \n"; foreach ($changelogbody as $changelogitem) {