added quotes for echo to sanitize input

willjasen · Jul 28, 2021 · ebf643a · ebf643a
1 parent dd9c6a4
commit ebf643a
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/templates/ResilioSync.template b/templates/ResilioSync.template
@@ -411,16 +411,16 @@
             "commands" : {
               "01-encrypt-volume" : {
                 "command" : { "Fn::Join" : ["", [
-                  "echo ",
+                  "echo \"",
                   { "Ref": "DiskEncryptionPassword" },
-                  " | cryptsetup luksFormat /dev/xvdf"
+                  "\" | cryptsetup luksFormat /dev/xvdf"
                 ]]}
               },
               "02-open-volume" : {
                 "command" : { "Fn::Join" : ["", [
-                  "echo ",
+                  "echo \"",
                   { "Ref": "DiskEncryptionPassword" },
-                  " | cryptsetup luksOpen /dev/xvdf storedev"
+                  "\" | cryptsetup luksOpen /dev/xvdf storedev"
                 ]]}
               },
               "03-format-volume" : {