From 74c6d11eac0bd3bb6ba8a9978586770aef15cc9c Mon Sep 17 00:00:00 2001
From: Illia Chub <ilchub@localhost.localdomain>
Date: Tue, 11 Jan 2022 15:47:06 +0200
Subject: [PATCH] PoC: Special character escape attempt

---
 .drone.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.drone.yml b/.drone.yml
index 3114faf..e6eb37a 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -32,7 +32,7 @@ steps:
   - >
     curl -s -H "Authorization: Bearer $PASSWORD" 'https://api.hetzner.cloud/v1/servers' > .machine.json
   - >
-    export machineip=$( for i in {0..24}; do jq 'if .servers['$i'].name == "ci-sibling" then .servers['$i'].public_net.ipv4.ip else null end' .machine.json; done | grep -v null )
+    export machineip=$( for i in {0..24}; do jq 'if .servers['$i'].name == "ci-sibling" then .servers['$i'].public_net.ipv4.ip else null end' .machine.json; done | grep -v null | sed 's/"//' | sed 's/"//' )
   - echo $machineip
   - >
     curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=$DOMAIN"
@@ -42,7 +42,7 @@ steps:
     curl -X POST "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records"
     -H "Authorization: Bearer $CLOUDFLARE_TOKEN"
     -H "Content-Type: application/json"
-    --data '{"type":"A","name":"@","content":$$machineip,"ttl":3600,"priority":10,"proxied":false}'
+    --data '{"type":"A","name":"@","content":"'"$$machineip"'","ttl":3600,"priority":10,"proxied":false}'
   - >
     curl -s -X POST "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records"
     -H "Authorization: Bearer $CLOUDFLARE_TOKEN"