TASK: escape shell args in wget

punktDe · Dec 9, 2020 · 181d92a · 181d92a
1 parent 0faee7d
commit 181d92a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Classes/Utility/Wget/WgetCommand.php b/Classes/Utility/Wget/WgetCommand.php
@@ -594,7 +594,8 @@ protected function buildCommand()
             }
         }
 
-        return sprintf('%s %s "%s"', $this->wgetBinaryPath, implode(' ', $arguments), $this->url);
+        return sprintf('%s %s "%s"', $this->wgetBinaryPath, implode(' ', array_map('escapeshellarg', $arguments)), escapeshellarg($this->url));
+
     }