fix(toolbox): avoid prompt injection

Co-authored-by: Carlo Sala <carlosalag@protonmail.com>

plugins/toolbox/README.md

@@ -10,7 +10,8 @@ plugins=(... toolbox)
 
 ## Prompt function
 
-This plugins adds `toolbox_prompt_info()` function. Using it in your prompt, it will show the toolbox indicator ⬢ (if you are running in a toolbox container), and nothing if not.
+This plugins adds `toolbox_prompt_info()` function. Using it in your prompt, it will show the toolbox
+indicator ⬢ (if you are running in a toolbox container), and nothing if not.
 
 You can use it by adding `$(toolbox_prompt_info)` to your `PROMPT` or `RPROMPT` variable:
 
@@ -18,9 +19,11 @@ You can use it by adding `$(toolbox_prompt_info)` to your `PROMPT` or `RPROMPT`
 RPROMPT='$(toolbox_prompt_info)'
 ```
 
+In the same way, it adds `toolbox_prompt_name()`, showing the name of the containerized environment.
+
 ## Aliases
 
-| Alias | Command              | Description                            |
-|-------|----------------------|----------------------------------------|
-| tbe   | `toolbox enter`      | Enters the toolbox environment         |
-| tbr   | `toolbox run`        | Run a command in an existing toolbox   |
+| Alias | Command         | Description                          |
+| ----- | --------------- | ------------------------------------ |
+| tbe   | `toolbox enter` | Enters the toolbox environment       |
+| tbr   | `toolbox run`   | Run a command in an existing toolbox |

plugins/toolbox/toolbox.plugin.zsh

@@ -2,5 +2,11 @@ function toolbox_prompt_info() {
   [[ -f /run/.toolboxenv ]] && echo "⬢"
 }
 
+function toolbox_prompt_name() {
+  [[ -f /run/.containerenv ]] || return
+  local _to_print="$(cat /run/.containerenv | awk -F\" '/name/ { print$2 }')"
+  echo ${_to_print:gs/%/%%}
+}
+
 alias tbe="toolbox enter"
 alias tbr="toolbox run"