[Portland-bugs] [Bug 66670] xdg-open: command injection vulnerability

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Sat Nov 15 12:02:09 PST 2014


https://bugs.freedesktop.org/show_bug.cgi?id=66670

--- Comment #7 from Rex Dieter <rdieter at math.unl.edu> ---
Created attachment 109536
  --> https://bugs.freedesktop.org/attachment.cgi?id=109536&action=edit
Fix argument quoting to avoid evaluation

First try to address argument quoting issues.  Seems to fix test-case ok,
trying other use-cases to verify no regressions.  Please test.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/portland-bugs/attachments/20141115/2e84540d/attachment.html>


More information about the Portland-bugs mailing list