mirror of
https://github.com/yiisoft/yii2.git
synced 2025-11-18 15:31:06 +08:00
Usage of "escapeshellarg" has been added to "yii\console\controllers\AssetController::actionCompress()".
This commit is contained in:
@@ -365,8 +365,8 @@ EOD
|
||||
$tmpFile = $outputFile . '.tmp';
|
||||
$this->combineJsFiles($inputFiles, $tmpFile);
|
||||
$log = shell_exec(strtr($this->jsCompressor, array(
|
||||
'{from}' => $tmpFile,
|
||||
'{to}' => $outputFile,
|
||||
'{from}' => escapeshellarg($tmpFile),
|
||||
'{to}' => escapeshellarg($outputFile),
|
||||
)));
|
||||
@unlink($tmpFile);
|
||||
} else {
|
||||
@@ -385,8 +385,8 @@ EOD
|
||||
$tmpFile = $outputFile . '.tmp';
|
||||
$this->combineCssFiles($inputFiles, $tmpFile);
|
||||
$log = shell_exec(strtr($this->cssCompressor, array(
|
||||
'{from}' => $tmpFile,
|
||||
'{to}' => $outputFile,
|
||||
'{from}' => escapeshellarg($tmpFile),
|
||||
'{to}' => escapeshellarg($outputFile),
|
||||
)));
|
||||
@unlink($tmpFile);
|
||||
} else {
|
||||
|
||||
Reference in New Issue
Block a user