Escape base directory name when building shell command

egasoft · May 15, 2017 · 7ce7bb9 · 7ce7bb9
1 parent 5847603
commit 7ce7bb9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Filters/GitModified.php b/src/Filters/GitModified.php
@@ -36,7 +36,7 @@ protected function getWhitelist()
     {
         $modified = array();
 
-        $cmd    = 'git ls-files -o -m --exclude-standard -- '.$this->basedir;
+        $cmd    = 'git ls-files -o -m --exclude-standard -- ' . escapeshellarg($this->basedir);
         $output = array();
         exec($cmd, $output);