From dcbcf799c41d2fea56016eb66449083c11abba03 Mon Sep 17 00:00:00 2001 From: constantprojects Date: Tue, 24 Feb 2026 08:50:39 -0700 Subject: [PATCH] Fix stdin hijack when run via curl | bash When piped through curl, stdin is the download stream, not the terminal. This caused setup wizard prompts to read empty input (the 'rogue enter' bug). Fix: reopen stdin from /dev/tty before any interactive prompts. Co-Authored-By: Claude Opus 4.6 --- install.sh | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/install.sh b/install.sh index 20a7638..fc487e0 100755 --- a/install.sh +++ b/install.sh @@ -50,6 +50,13 @@ show_progress() { fi } +# --- Reclaim stdin for interactive prompts --- +# When run via `curl ... | bash`, stdin is the pipe. Reopen it from +# the terminal so read prompts (setup wizard, confirmations) work. +if [ ! -t 0 ]; then + exec < /dev/tty +fi + header "WebsiteBox Installer" # --- Check for root/sudo ---