| commit | e3b0cff5506ff6ed7ecfc19654c1e61a7ad3d621 | |
| author | antrik <antrik@users.sf.net> | |
| Thu, 25 Nov 2010 10:49:04 +0000 (25 11:49 +0100) | ||
| committer | Sandro Santilli <strk@keybit.net> | |
| Wed, 29 Dec 2010 09:13:56 +0000 (29 10:13 +0100) | ||
| tree | 4eb4ef0026bf9870535350f672e40914bf05c0fd | treesnapshot (tar.gz zip) |
| parent | 399c42b5702bac224c86b51da07f85e6f2685b2d | commitdiff |
npapi/writelauncher: Prevent script parameter strings from escaping shell quoting
Make sure a ' character in the parameter string doesn't escape the shell
quoting. This is accomplished by replacing it with a '\'' sequence, i.e.
ending the single quoting, including an explicitely quoted single quote
character, and starting the quoting again.
As the substitution using boost's string algorithm library is trivial,
just do it inline it the script writing statements.
Make sure a ' character in the parameter string doesn't escape the shell
quoting. This is accomplished by replacing it with a '\'' sequence, i.e.
ending the single quoting, including an explicitely quoted single quote
character, and starting the quoting again.
As the substitution using boost's string algorithm library is trivial,
just do it inline it the script writing statements.
| plugin/npapi/plugin.cpp | diffblobblamehistory |