Replace eval with source because safe

build.sh

@@ -53,8 +53,10 @@ mkdir -p "$tmpdir";
 
 # Config
 
-cp -Rf "$workdir/conf/defconf-$confvar.txt" "$tmpdir/defconf";
-eval "$(cat "$tmpdir/defconf")" || { echo " " >&2; echo "FATAL: Config for $confvar cannot be executed" >&2; return 1; };
+cp -f "$workdir/conf/defconf-$confvar.txt" "$tmpdir/defconf";
+chmod 0777 "$tmpdir/defconf";
+. "$tmpdir/defconf" || { echo " " >&2; echo "FATAL: Config for $confvar cannot be executed" >&2; return 1; };
+
 echo " ";
 echo " - Config says variant $variant";
 

update.sh

@@ -36,7 +36,9 @@ mkdir -p "$tmpdir" "$tmpdir/repos" "$(dirname "$updatelog")";
 # Config
 
 [ -f "$confdir/resdl-download.txt" ] || { echo " "; echo "F: No resdl-download.txt found"; return 1; }
-eval "$(cat "$confdir/resdl-download.txt")" || { echo " "; echo "FATAL: resdl-download.txt cannot be executed" >&2; return 1; };
+cp -f "$confdir/resdl-download.txt" "$tmpdir/resdlconf";
+chmod 0777 "$tmpdir/resdlconf";
+. "$tmpdir/resdlconf" || { echo " "; echo "FATAL: resdl-download.txt cannot be executed" >&2; return 1; };
 
 if [ "$*" ]; then
   echo " ";