fix: escape svn webhook commit id in export command

YHalo-wyh · corpsee · commit 7b8e6404b712 · 2026-05-31T14:19:44.000+07:00
diff --git a/src/Model/Build/SvnBuild.php b/src/Model/Build/SvnBuild.php
@@ -111,7 +111,7 @@ protected function cloneByHttp(Builder $builder, $cloneTo)
 
         if (!empty($this->getCommitId())) {
             $cmd .= ' -r %s %s "%s"';
-            $success = $builder->executeCommand($cmd, $this->getCommitId(), $this->getCloneUrl(), $cloneTo);
+            $success = $builder->executeCommand($cmd, \escapeshellarg($this->getCommitId()), $this->getCloneUrl(), $cloneTo);
         } else {
             $cmd .= ' %s "%s"';
             $success = $builder->executeCommand($cmd, $this->getCloneUrl(), $cloneTo);
