[Portland-bugs] [Bug 103807] Argument injection in xdg-open open_envvar

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=103807

--- Comment #5 from carnil at debian.org ---
Hi

The autotests/t-xdg-open-url.sh autotest which was introduced with the
ttps://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=094b73658a4fb11a40924d8df72165b054aac330
commit ('check that $BROWSER with %s is safe from shell injection') will need
an adjustment after the
https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=ce802d71c3466d1dbb24f2fe9b6db82a1f899bcb
commit

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/portland-bugs/attachments/20180510/eef96b1f/attachment.html>