github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-12-16 06:03:46 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Don't use backticks for exporting your archive

Browse Source
This commit is contained in:
Robin Ward 2017-03-16 16:24:59 -04:00
parent 0f6a2b912a
commit c14d98354b
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/jobs/regular/export_csv_file.rb
View File

@ -48,8 +48,7 @@ module Jobs
end end
# compress CSV file # compress CSV file
`gzip -5 #{absolute_path}` system('gzip', '-5', absolute_path)
ensure ensure
notify_user(file_name, absolute_path) notify_user(file_name, absolute_path)
end end