From f6ed74039a4efbac34496d548c994fa63f169e5a Mon Sep 17 00:00:00 2001
From: Bruno Charest <bruno.charest@gmail.com>
Date: Wed, 24 Jun 2026 11:24:11 -0400
Subject: [PATCH] fix: CORS_ORIGINS quote et source securise du .env

---
 scripts/deploy.sh | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index d45a3f6..348fdc3 100644
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -274,7 +274,7 @@ TESSERACT_CMD=$TESSERACT_CMD
 OCR_LANGUAGES=$OCR_LANGUAGES
 
 # ── CORS ─────────────────────────────────────────────────────
-CORS_ORIGINS=$CORS_ORIGINS
+CORS_ORIGINS='$CORS_ORIGINS'
 
 # ── Authentification ─────────────────────────────────────────
 ADMIN_API_KEY=
@@ -304,7 +304,11 @@ create_directories() {
 
     # Charger .env s'il existe
     if [[ -f "$ENV_FILE" ]]; then
-        set -a; source "$ENV_FILE"; set +a
+        while IFS= read -r line; do
+        [[ "$line" =~ ^[[:space:]]*# ]] && continue
+        [[ "$line" =~ ^[[:space:]]*$ ]] && continue
+        [[ "$line" =~ ^[[:space:]]*[A-Za-z_][A-Za-z0-9_]*= ]] && eval "export $line" 2>/dev/null || true
+    done < "$ENV_FILE"
     fi
 
     local backup_dir="${BACKUP_DIR:-./backups}"
@@ -384,7 +388,11 @@ show_urls() {
 
     # Charger les ports depuis .env
     if [[ -f "$ENV_FILE" ]]; then
-        set -a; source "$ENV_FILE"; set +a
+        while IFS= read -r line; do
+        [[ "$line" =~ ^[[:space:]]*# ]] && continue
+        [[ "$line" =~ ^[[:space:]]*$ ]] && continue
+        [[ "$line" =~ ^[[:space:]]*[A-Za-z_][A-Za-z0-9_]*= ]] && eval "export $line" 2>/dev/null || true
+    done < "$ENV_FILE"
     fi
     local admin_port="${ADMIN_PORT:-3001}"
     local backend_port="${BACKEND_PORT:-8001}"
@@ -403,7 +411,7 @@ show_urls() {
 # ── Mise à jour ──────────────────────────────────────────────
 
 restart_updated() {
-    source "$ENV_FILE" 2>/dev/null || true
+    while IFS= read -r line; do [[ "$line" =~ ^[A-Za-z_][A-Za-z0-9_]*= ]] && eval "$line" 2>/dev/null || true; done < "$ENV_FILE"
     info "Mise à jour : pull + recréation..."
     docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" pull 2>&1 | grep -E "Pull|Image|up to date" || true
     docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d --remove-orphans