Safe passing of subprocess arguments - always.

2023-04-13 20:45:35 +02:00 · 2023-04-13 20:45:35 +02:00 · 7f7d1c43c8
commit 7f7d1c43c8
parent ee8aa95e24
3 changed files with 13 additions and 13 deletions
--- a/src/web-static.scm
+++ b/src/web-static.scm
@ -71,11 +71,12 @@
       (lambda ()
 	 (let loop ((lines
 		     (get-process-output-lines
-		      (sprintf "git -C \"~A\" log -p -- \"~A\""
-			       (string-translate* (*members-directory*)
-						  '(("\"" . "\\\"")))
-			       (brmember-file-name mr)
-			       ))))
+		      "git"
+		      "-C" (*members-directory*)
+		      "log"
+		      "-p"
+		      "--"
+		      (brmember-file-name mr))))
 	   (when (not (null? lines))
 	     (print (car lines))
 	     (loop (cdr lines))))))