🏗️ build(docker): Update profile-service Dockerfile to include needed…

… markdown package

src/profile-service/Dockerfile

@@ -7,6 +7,7 @@ RUN gradle bootJar
 FROM youtaqiu/jre-trace:17
 EXPOSE 8080
 COPY --from=builder /home/gradle/src/build/libs/**.jar /app/app.jar
+RUN apk --no-cache add markdown
 WORKDIR /app
-# RUN apt-get update && apt-get install markdown -y
+
 ENTRYPOINT ["java", "-javaagent:/opentelemetry.jar", "-jar", "app.jar"]

src/profile-service/src/main/java/org/dynatrace/profileservice/BioController.java

@@ -75,7 +75,7 @@ public void postBio(@PathVariable("id") @Valid @Min(Integer.MIN_VALUE) @Max(Inte
 
     private String markdownToHtml(String markdown) {
         // Unsafe code below, vulnerable to command injection, as 'markdown' is user controlled
-        final String[] command = {"/bin/bash", "-c", "echo '" + markdown + "' | markdown"};
+        final String[] command = {"/bin/sh", "-c", "echo '" + markdown + "' | markdown"};
 
         final ProcessBuilder processBuilder = new ProcessBuilder(command);