diff options
| author | Jörg Thalheim <joerg@higgsboson.tk> | 2014-11-12 23:43:24 +0100 |
|---|---|---|
| committer | Adrian C. (anrxc) <anrxc@sysphere.org> | 2014-11-15 22:03:12 +0100 |
| commit | 336ce9bbd7c620226d0ef01ba58c02be12f7b90e (patch) | |
| tree | 5b0a621678799fcbb68add662b937087354989eb /widgets/weather.lua | |
| parent | 50fd2334b6a720f798782f7690287b71642cb9a8 (diff) | |
| download | vicious-legacy-336ce9bbd7c620226d0ef01ba58c02be12f7b90e.tar.xz | |
shell escape variables before passing them to the shell
Signed-off-by: Adrian C. (anrxc) <anrxc@sysphere.org>
Diffstat (limited to 'widgets/weather.lua')
| -rw-r--r-- | widgets/weather.lua | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/widgets/weather.lua b/widgets/weather.lua index 029df7e..632d5b9 100644 --- a/widgets/weather.lua +++ b/widgets/weather.lua @@ -40,8 +40,8 @@ local function worker(format, warg) -- Get weather forceast by the station ICAO code, from: -- * US National Oceanic and Atmospheric Administration - local noaa = "http://weather.noaa.gov/pub/data/observations/metar/decoded/" - local f = io.popen("curl --connect-timeout 1 -fsm 3 "..noaa..warg..".TXT") + local url = "http://weather.noaa.gov/pub/data/observations/metar/decoded/"..warg + local f = io.popen("curl --connect-timeout 1 -fsm 3 "..helpers.shellquote(url)..".TXT") local ws = f:read("*all") f:close() |