properly encode user-specified values

Author: josh-heyer

.github/workflows/tools-events.yml

@@ -21,9 +21,9 @@ jobs:
           event-type: ${{ env.EVENT_PREFIX }}-${{ github.event_name }}
           client-payload: |
             {
-              "ref": "${{ github.head_ref || github.ref }}",
+              "ref": "${{ toJSON(github.head_ref || github.ref) }}",
               "ref_type": "${{ github.ref_type }}",
-              "ref_name": "${{ github.ref_name }}",
+              "ref_name": "${{ toJSON(github.ref_name) }}",
               "repo": "${{ github.repository }}",
               "sha": "${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}",
               "type": "${{ github.event_name }}",
@@ -36,11 +36,11 @@ jobs:
               "action": "${{ github.event.action }}",
               "number": "${{ github.event.number }}",
               "release": {
-                "tag_name": "${{ github.event.release && github.event.release.tag_name || '' }}",
+                "tag_name": "${{ github.event.release && toJSON(github.event.release.tag_name) || '' }}",
                 "id": "${{ github.event.release && github.event.release.id || '' }}",
-                "tag": "${{ github.event.release && github.event.release.tag_name || '' }}",
-                "name": "${{ github.event.release && github.event.release.name || '' }}",
-                "body": "${{ github.event.release && github.event.release.body || '' }}",
+                "tag": "${{ github.event.release && toJSON(github.event.release.tag_name) || '' }}",
+                "name": "${{ github.event.release && toJSON(github.event.release.name) || '' }}",
+                "body": "${{ github.event.release && toJSON(github.event.release.body) || '' }}",
                 "draft": "${{ github.event.release && github.event.release.draft || false }}"
               }
             }