Remove injection vulnerability in codemirror e2e via inputs.browser (#670)

Author: anderson4j

.github/actions/codemirror-e2e-tests/action.yaml

@@ -13,20 +13,26 @@ runs:
   steps:
     - name: Validate browser input
       shell: bash
+      env:
+        BROWSER: ${{ inputs.browser }}
       run: |
-        if [[ "${{ inputs.browser }}" != "chromium" && "${{ inputs.browser }}" != "firefox" ]]; then
-          echo "Invalid browser (should be one of firefox or chromium): ${{ inputs.browser }}"
+        if [[ "$BROWSER" != "chromium" && "$BROWSER" != "firefox" ]]; then
+          echo "Invalid browser (should be one of firefox or chromium): $BROWSER"
           exit 1
         fi
 
     - name: Install Playwright Browsers
       shell: bash
-      run: pnpm exec playwright install --only-shell --with-deps ${{ inputs.browser }}
+      env:
+        BROWSER: ${{ inputs.browser }}
+      run: pnpm exec playwright install --only-shell --with-deps "$BROWSER"
       working-directory: packages/react-codemirror
 
     - name: Run e2e test
       shell: bash
-      run: pnpm --filter react-codemirror test:e2e --project=${{ inputs.browser }}
+      env:
+        BROWSER: ${{ inputs.browser }}
+      run: pnpm --filter react-codemirror test:e2e --project="$BROWSER"
 
     - name: Upload Playwright Report
       uses: actions/upload-artifact@v4

.lintstagedrc.json

@@ -7,5 +7,7 @@
   ],
   "vendor/antlr4-c3/index.ts": ["bash check-imports.sh"],
   "*.js": ["oxlint --fix --type-aware --max-warnings 0"],
-  "*.json": ["oxfmt"]
+  "*.json": ["oxfmt"],
+  "*.yaml": ["oxfmt"],
+  "*.yml": ["oxfmt"]
 }