Chris Down
Chris Down
Hi, Just to let you know, your use of `system()` is vulnerable to arbitrary command execution (this situation is especially bad since it can be invoked by anyone over IRC)....
This is somewhat difficult and is outside the current provided infrastructure because it requires one to do some checks first to see if this looks like something that should be...
The most major one is file renaming based on tags, which should be done after tag cleanup. There are others, though, like making sure case insensitive matches for the same...
v5 was released with AUR v4.2.0 on February 15, 2016, we should update.