devs/cproof-plugins
2
1
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Use shlex to shell quote user input properly

Browse Source
This commit is contained in:
Vasilij Schneidermann
2021-01-27 21:53:28 +01:00
parent 6567aae509
commit ab9a606473
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
stable/say.py
View File

@@ -9,15 +9,16 @@ On OSX will use the built in 'say' command.
import prof
import os
import shlex
from sys import platform
def say(message):
args = prof.settings_string_get("say", "args", "")
if platform == "darwin":
os.system("say " + args + " '" + message + "' 2>/dev/null")
os.system("say " + args + " " + shlex.quote(message) + " 2>/dev/null")
elif platform == "linux" or platform == "linux2":
os.system("echo '" + message + "' | espeak " + args + " 2>/dev/null")
os.system("echo " + shlex.quote(message) + " | espeak " + args + " 2>/dev/null")
def prof_post_chat_message_display(barejid, resource, message):