Skip to content

Y
yii2
Commit 2c930ae2 by Klimov Paul
Options

Usage of "escapeshellarg" has been added to…

Usage of "escapeshellarg" has been added to "yii\console\controllers\AssetController::actionCompress()".
parent d3beeb7d
Showing with 4 additions and 4 deletions
yii/console/controllers/AssetController.php
......@@ -365,8 +365,8 @@ EOD
$tmpFile = $outputFile . '.tmp';
$this->combineJsFiles($inputFiles, $tmpFile);
$log = shell_exec(strtr($this->jsCompressor, array(
'{from}' => $tmpFile,
'{to}' => $outputFile,
'{from}' => escapeshellarg($tmpFile),
'{to}' => escapeshellarg($outputFile),
)));
@unlink($tmpFile);
} else {
......@@ -385,8 +385,8 @@ EOD
$tmpFile = $outputFile . '.tmp';
$this->combineCssFiles($inputFiles, $tmpFile);
$log = shell_exec(strtr($this->cssCompressor, array(
'{from}' => $tmpFile,
'{to}' => $outputFile,
'{from}' => escapeshellarg($tmpFile),
'{to}' => escapeshellarg($outputFile),
)));
@unlink($tmpFile);
} else {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment