jyapayne/Nim
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make quoteIfContainsWhite quote argument, so it can be safely passed to shell.

Browse source 
On Windows put it in double quotes and escape double quotes using backslash.
On Posix put it in single quotes and escape single quotes using '"'"'.

This commit changes what quoteIfContainsWhite does, but before that change it
was used incorrectly all over standard library, which caused security issues.
This commit is contained in:
Michał Zieliński 2013-12-02 18:34:32 +01:00
commit e7e8c77062
2 changed files with 45 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
web/news.txt
View file

@ -28,6 +28,8 @@ Changes affecting backwards compatibility
require an error code to be passed to them. This error code can be retrieved
using the new ``OSLastError`` proc.
- ``os.parentDir`` now returns "" if there is no parent dir.
- ``quoteIfContainsWhite`` now escapes argument in such way that it can be safely
passed to shell, instead of just adding double quotes.
Compiler Additions