From 01937739285f78143333d4cf1a01a793e9ab0827 Mon Sep 17 00:00:00 2001 From: Isaiah Odhner Date: Sat, 22 Jul 2023 00:13:30 -0400 Subject: [PATCH] Avoid shell code injection in some disabled code --- src/textual_paint/wallpaper.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/textual_paint/wallpaper.py b/src/textual_paint/wallpaper.py index 105689c..4753d1d 100644 --- a/src/textual_paint/wallpaper.py +++ b/src/textual_paint/wallpaper.py @@ -190,8 +190,8 @@ def set_wallpaper(file_loc: str, first_run: bool = True): args = ["wmsetbg", "-s", "-u", file_loc] subprocess.Popen(args) # elif desktop_env=="enlightenment": # I have not been able to make it work on e17. On e16 it would have been something in this direction - # args = "enlightenment_remote -desktop-bg-add 0 0 0 0 %s" % file_loc - # subprocess.Popen(args,shell=True) + # args = ["enlightenment_remote", "-desktop-bg-add", "0", "0", "0", "0", file_loc] + # subprocess.Popen(args) elif desktop_env=="windows": #From https://stackoverflow.com/questions/1977694/change-desktop-background # Tested on Windows 10. -- @1j01