diff options
| author | Jörg Thalheim <joerg@higgsboson.tk> | 2014-11-12 23:43:24 +0100 |
|---|---|---|
| committer | Adrian C. (anrxc) <anrxc@sysphere.org> | 2014-11-15 22:03:12 +0100 |
| commit | 336ce9bbd7c620226d0ef01ba58c02be12f7b90e (patch) | |
| tree | 5b0a621678799fcbb68add662b937087354989eb /widgets/hddtemp.lua | |
| parent | 50fd2334b6a720f798782f7690287b71642cb9a8 (diff) | |
| download | vicious-legacy-336ce9bbd7c620226d0ef01ba58c02be12f7b90e.tar.xz | |
shell escape variables before passing them to the shell
Signed-off-by: Adrian C. (anrxc) <anrxc@sysphere.org>
Diffstat (limited to 'widgets/hddtemp.lua')
| -rw-r--r-- | widgets/hddtemp.lua | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/widgets/hddtemp.lua b/widgets/hddtemp.lua index 85ee767..5c2b1a6 100644 --- a/widgets/hddtemp.lua +++ b/widgets/hddtemp.lua @@ -8,6 +8,7 @@ local tonumber = tonumber local io = { popen = io.popen } local setmetatable = setmetatable local string = { gmatch = string.gmatch } +local helpers = require("vicious.helpers") -- }}} @@ -22,7 +23,8 @@ local function worker(format, warg) if warg == nil then warg = 7634 end local hdd_temp = {} -- Get info from the hddtemp daemon - local f = io.popen("echo | curl --connect-timeout 1 -fsm 3 telnet://127.0.0.1:"..warg) + local quoted = helpers.shellquote(warg) + local f = io.popen("echo | curl --connect-timeout 1 -fsm 3 telnet://127.0.0.1:"..quoted) for line in f:lines() do for d, t in string.gmatch(line, "|([%/%a%d]+)|.-|([%d]+)|[CF]+|") do |