From 7165bc14ade7f1a17cff76580bba9332c4da9f59 Mon Sep 17 00:00:00 2001 From: Urban Müller Date: Tue, 7 Jun 2011 13:07:17 +0000 Subject: only escape args when needed --- it.class | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'it.class') diff --git a/it.class b/it.class index 6ec2ca2..e0e85a9 100644 --- a/it.class +++ b/it.class @@ -524,7 +524,7 @@ static function _exec_quotevalue($value, $errmsg = "") if (it::match('^-', $result)) it::fatal("leading - in value: " . $errmsg); - return escapeshellarg($result); + return it::match('[^-a-z0-9./_:,]', $result) ? escapeshellarg($result) : $result; } -- cgit v1.2.3