]> git.lizzy.rs Git - bspwm.git/commit
Escape shell characters in the erc arguments
authorBastien Dejean <nihilhill@gmail.com>
Thu, 30 Jul 2020 08:38:45 +0000 (10:38 +0200)
committerBastien Dejean <nihilhill@gmail.com>
Thu, 30 Jul 2020 08:38:45 +0000 (10:38 +0200)
commit7a7b17ba280ae0c37cac2fd0c1f309421c6f2a73
tree82ceac4ed3fb998893d8f319f9be9cbb7776051d
parent9ef79d76d4c6cdf7f4616ebbbd8ac2dcef51651e
Escape shell characters in the erc arguments

Since `eval "$4"` is frequently used within the external rules command,
we want to avoid the possibility of unwanted code execution.

Fixes #1162.
Closes #1161.
src/helpers.c
src/helpers.h
src/query.c