fix: avoid injection of substitution commands when parsing yaml

stream-sprout

@@ -46,6 +46,7 @@ function parse_yaml() {
    w='[a-zA-Z0-9_]*'
    fs=$'\034'
    sed -ne "s|^\(${s}\):|\1|" \
+        -e 's|`||g;s|\$||g;' \
         -e "s|^\(${s}\)\(${w}\)${s}:${s}[\"']\(.*\)[\"']$s\$|\1${fs}\2${fs}\3|p" \
         -e "s|^\(${s}\)\(${w}\)${s}:${s}\(.*\)${s}\$|\1${fs}\2${fs}\3|p" "${1}" |
    awk -F"${fs}" '{