diff options
| author | Slatian <baschdel@disroot.org> | 2023-09-26 21:35:24 +0200 |
|---|---|---|
| committer | Slatian <baschdel@disroot.org> | 2023-09-26 21:35:24 +0200 |
| commit | 7b80a87bd137f947104e85d5c3d3bad0b6468543 (patch) | |
| tree | d212aac9bae9531c5fd391ce7782e7752e09866e | |
| parent | 171f5ed39f8706edb6b8960e17c6aa281beb44d0 (diff) | |
Quote Browser variable to avod unintentional code execution
| -rwxr-xr-x | scripts/xdg-open.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/xdg-open.in b/scripts/xdg-open.in index 5b59263..d8b180e 100755 --- a/scripts/xdg-open.in +++ b/scripts/xdg-open.in @@ -569,7 +569,7 @@ DEBUG 2 "Selected DE $DE" # sanitize BROWSER (avoid calling ourselves in particular) case "${BROWSER}" in *:"xdg-open"|"xdg-open":*) - BROWSER=$(echo $BROWSER | sed -e 's|:xdg-open||g' -e 's|xdg-open:||g') + BROWSER="$(echo $BROWSER | sed -e 's|:xdg-open||g' -e 's|xdg-open:||g')" ;; "xdg-open") BROWSER= |