escape shell args

2013-11-23 19:39:04 +01:00 · 2013-11-23 19:39:04 +01:00 · e36d7f23ef
parent 325c57f30c
commit e36d7f23ef
1 changed files with 2 additions and 0 deletions
--- a/src/Composer/Command/HomeCommand.php
+++ b/src/Composer/Command/HomeCommand.php
@ -98,6 +98,8 @@ EOT
     */
    private function openBrowser($url)
    {
+        $url = escapeshellarg($url);
+
        if (defined('PHP_WINDOWS_VERSION_MAJOR')) {
            return passthru('start "web" explorer "' . $url . '"');
        }