pegasus/weechat
1
0
Fork 0
mirror of https://github.com/weechat/weechat.git synced 2026-06-26 12:56:37 +02:00
Code Activity

exec: don't use shell by default when executing commands (for security reasons)

Browse Source 
It is possible to force shell by default with this command:
/set exec.command.default_options "-sh"
This commit is contained in:
Sebastien Helleu
2014-03-17 14:59:00 +01:00
parent e84eaafe8e
commit 30de830982
19 changed files with 123 additions and 107 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/plugins/exec/exec-command.c
+4 -3
View File
@@ -381,7 +381,7 @@ exec_command_run (struct t_gui_buffer *buffer,
/* parse command options */
cmd_options.command_index = -1;
cmd_options.use_shell = 1;
cmd_options.use_shell = 0;
cmd_options.detached = 0;
cmd_options.pipe_stdin = 0;
cmd_options.timeout = 0;
@@ -764,10 +764,11 @@ exec_command_init ()
" || -set <id> <property> <value>"
" || -del <id>|-all [<id>...]"),
N_(" -list: list commands\n"
" -sh: use the shell to execute the command (default)\n"
" -sh: use the shell to execute the command (WARNING: use this "
"option ONLY if all arguments are safe date, see option -nosh)\n"
" -nosh: do not use the shell to execute the command (required if "
"the command has some unsafe data, for example the content of a "
"message from another user)\n"
"message from another user) (default)\n"
" -bg: run process in background: do not display process output "
"neither return code (not compatible with options -o/-n)\n"
" -nobg: catch process output and display return code (default)\n"