Code Injection Fix

2022-12-16 11:50:25 +01:00 · 2022-12-16 11:50:25 +01:00 · 325880f46e
commit 325880f46e
parent 50164a92c6
4 changed files with 8 additions and 4707 deletions
--- a/src/pypdevs/util.py
+++ b/src/pypdevs/util.py
@ -124,6 +124,8 @@ def easyCommand(function, args):
    for i in range(len(args)):
        if i != 0:
            text += ", "
+        if isinstance(args[i], str):
+            args[i] = '"%s"' % args[i][1:-1].replace('"', "\\\"").replace("'", "\\'")
        text += str(args[i])
    text += ")"
    return text