ADFA-3269 Safer handling of shell special characters (#1077)

Safer handling of shell special characters

Author: hal-eisen-adfa

.github/workflows/release.yml

@@ -705,7 +705,7 @@ jobs:
           APK_BASENAME=$(basename "$APK_PATH")
           APK_FILENAME="${APK_BASENAME%.*}-${VARIANT}.${APK_BASENAME##*.}"
           DOWNLOAD_URL="https://download.appdevforall.org/${APK_FILENAME}"
-          MESSAGE="${GIT_LOG}"$'\n\n'"Download: ${DOWNLOAD_URL}"
+          MESSAGE=$( printf "Download: %s\n\n%s" "$DOWNLOAD_URL" "$GIT_LOG" )
           # Telegram message limit 4096; use first 4096 chars
           MESSAGE="${MESSAGE:0:4096}"
           curl -s -X POST -H "Content-Type: application/json" \
@@ -716,4 +716,4 @@ jobs:
         if: always()
         run: |
           rm -f app/google-services.json
-          echo "google-services.json cleaned up successfully"
+          echo "google-services.json cleaned up successfully"