meck-gd
meck-gd
Hey @salehmuhaysin, It's not directly related to this issue but I wanted to bring something to your attention that could be worthwhile to add to your new release before it's...
By the way, the same commit adds a shell command injection with this line if you control `zip_path`: ``` p = subprocess.Popen(" ".join(["7z", "x", zip_path, "-o" + dst_path, "-y" ,...
Hi saleh, The point is that using `" ".join(...)` AND `shell=True` is highly insecure. You can just pass a list directly as first `Popen` parameter rather than joining a string,...
Seems it was working fine in 6.5.x. In my chat history I successfully sent someone a `.csr` file a couple months ago. Now in (currently) 6.6.6 the chat is rejecting...
Hi, any news on getting this merged?