From 06536328c4b79d593bb86e20e558ffc41cd20317 Mon Sep 17 00:00:00 2001 From: infosave2007 Date: Sat, 8 Nov 2025 16:54:44 +0300 Subject: [PATCH] feat: Source .env file safely in update script for improved security --- update.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/update.sh b/update.sh index 3fb6902..3043f0e 100755 --- a/update.sh +++ b/update.sh @@ -28,7 +28,10 @@ fi # Load DB credentials from .env if [ -f .env ]; then - export $(grep -v '^#' .env | xargs) + # Source .env file safely + set -a + source .env + set +a DB_USER=${DB_USERNAME:-amnezia} DB_PASS=${DB_PASSWORD:-amnezia} DB_ROOT_PASS=${DB_ROOT_PASSWORD:-rootpassword}