1
0
mirror of https://github.com/vikstrous/pirate-get synced 2025-01-09 09:59:51 +01:00

fix code execution vuln, close #45

This commit is contained in:
Viktor Stanchev 2015-04-15 12:49:52 -04:00
parent f284854aca
commit 86f5a1277d

View File

@ -668,8 +668,8 @@ def main():
url = mags[int(choice)][0]
if args.transmission or config.getboolean('Misc', 'transmission'):
os.system('transmission-remote --add "%s" ' % url)
os.system('transmission-remote -l')
subprocess.call(['transmission-remote', '--add', url], shell=False)
subprocess.call(['transmission-remote', '-l'])
elif args.command or config.get('Misc', 'openCommand'):
command = config.get('Misc', 'openCommand')