fix: avoid glob expansion of app domains

A catch-all `*` domain or a wildcard ssl hostname could be expanded into file names from the current directory when generating app urls, healthcheck `Host` headers, or the nginx ssl server names.
This commit is contained in:
Jose Diaz-Gonzalez
2026-09-26 01:17:30 -04:00
parent 06f80b1a93
commit fba0681e5b
4 changed files with 38 additions and 7 deletions

View File

@@ -38,9 +38,11 @@ fn-domains-global-vhosts() {
fn-domains-generate-urls() {
declare APP="$1" DEFAULT_SCHEME="$2" DEFAULT_LISTEN_PORT="$3"
local app_vhosts="$(plugn trigger domains-list "$APP")"
if [[ -n "$app_vhosts" ]]; then
for app_vhost in $app_vhosts; do
local app_vhost
local -a app_vhosts
read -r -d '' -a app_vhosts <<<"$(plugn trigger domains-list "$APP")" || true
if [[ "${#app_vhosts[@]}" -gt 0 ]]; then
for app_vhost in "${app_vhosts[@]}"; do
fn-domains-generate-urls-from-config "$APP" "$DEFAULT_SCHEME" "$app_vhost" "$DEFAULT_LISTEN_PORT"
done
else