mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
316d49a8ae
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
(cherry picked from commit f219e65841)