From e36d7f23ef285afe5f7a7f3df8fa64ae750b540b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Scho=CC=88nthal?= <caziel@gmx.net>
Date: Sat, 23 Nov 2013 19:39:04 +0100
Subject: [PATCH] escape shell args

---
 src/Composer/Command/HomeCommand.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/Composer/Command/HomeCommand.php b/src/Composer/Command/HomeCommand.php
index 985ee61de..effe4a847 100644
--- a/src/Composer/Command/HomeCommand.php
+++ b/src/Composer/Command/HomeCommand.php
@@ -98,6 +98,8 @@ EOT
      */
     private function openBrowser($url)
     {
+        $url = escapeshellarg($url);
+
         if (defined('PHP_WINDOWS_VERSION_MAJOR')) {
             return passthru('start "web" explorer "' . $url . '"');
         }