Merge pull request #180 from tobi-pb/master

Using escapeshellarg
magento-hackathon · Apr 18, 2015 · 8e28d09 · 8e28d09 · vovayatsyuk · Apr 28, 2015
2 parents ed01951 + 8b93ec4
commit 8e28d09
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/MagentoHackathon/Composer/Magento/Deploystrategy/Symlink.php b/src/MagentoHackathon/Composer/Magento/Deploystrategy/Symlink.php
@@ -115,7 +115,7 @@ protected function _symlink($relSourcePath, $destPath, $absSourcePath)
         if (strtoupper(substr(PHP_OS, 0, 3)) == 'WIN') {
             $absSourcePath = str_replace('/', '\\', $absSourcePath);
             $param = is_dir($absSourcePath) ? ' /D' : '';
-            exec('mklink' . $param . ' "' . $destPath . '" "' . $absSourcePath . '"');
+            exec('mklink' . escapeshellarg($param) . ' "' . escapeshellarg($destPath) . '" "' . escapeshellarg($absSourcePath) . '"');
         } else {
             symlink($relSourcePath, $destPath);
         }