1
0
mirror of https://github.com/vikstrous/pirate-get synced 2025-01-10 10:04:21 +01:00

fix code execution vuln, close #45

This commit is contained in:
Viktor Stanchev 2015-04-15 12:49:52 -04:00
parent f284854aca
commit 86f5a1277d

View File

@ -668,8 +668,8 @@ def main():
url = mags[int(choice)][0] url = mags[int(choice)][0]
if args.transmission or config.getboolean('Misc', 'transmission'): if args.transmission or config.getboolean('Misc', 'transmission'):
os.system('transmission-remote --add "%s" ' % url) subprocess.call(['transmission-remote', '--add', url], shell=False)
os.system('transmission-remote -l') subprocess.call(['transmission-remote', '-l'])
elif args.command or config.get('Misc', 'openCommand'): elif args.command or config.get('Misc', 'openCommand'):
command = config.get('Misc', 'openCommand') command = config.get('Misc', 'openCommand')