forked from VimPlug/emmet-vim
File paths passed to system() via xxd and identify were using manual double-quote wrapping instead of shellescape(), which could allow command injection with specially crafted filenames.
13 KiB
13 KiB