Re-opened because the fix given is half-assed and still fails if the filename contains a double quote. Here is a patch that uses a proper list for the Popen arguments, with shell=False. More secure as well...
Re-opened because the fix given is half-assed and still fails if the filename contains a double quote. Here is a patch that uses a proper list for the Popen arguments, with shell=False. More secure as well...