[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] Fix ob-latex.el command injection vulnerability.
|
From: |
Ihor Radchenko |
|
Subject: |
Re: [PATCH] Fix ob-latex.el command injection vulnerability. |
|
Date: |
Sat, 18 Feb 2023 11:43:14 +0000 |
lux <lx@shellcodes.org> writes:
> - (shell-command (format "mv %s %s" img-out out-file)))))
> + (rename-file img-out out-file))))
I think should be (rename-file img-out out-file t)
--
Ihor Radchenko // yantar92,
Org mode contributor,
Learn more about Org mode at <https://orgmode.org/>.
Support Org development at <https://liberapay.com/org-mode>,
or support my work at <https://liberapay.com/yantar92>