1
0
Fork 0

Escape env value before passing it to system call

pull/2569/head
Gordon Franke 2014-01-09 13:12:10 +01:00
parent 11facc3f44
commit 202701c391
1 changed files with 1 additions and 1 deletions

View File

@ -132,7 +132,7 @@ EOT
{ {
// Open file in editor // Open file in editor
if ($input->getOption('editor')) { if ($input->getOption('editor')) {
$editor = getenv('EDITOR'); $editor = escapeshellcmd(getenv('EDITOR'));
if (!$editor) { if (!$editor) {
if (defined('PHP_WINDOWS_VERSION_BUILD')) { if (defined('PHP_WINDOWS_VERSION_BUILD')) {
$editor = 'notepad'; $editor = 'notepad';