Introduced protections against system command injection

2024-02-01 23:18:24 +00:00
parent 6105451e08
commit 91caa2a097
2 changed files with 4 additions and 2 deletions
--- a/src/main/java/stirling/software/SPDF/SPdfApplication.java
+++ b/src/main/java/stirling/software/SPDF/SPdfApplication.java
@@ -1,5 +1,6 @@
 package stirling.software.SPDF;

+import io.github.pixee.security.SystemCommand;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 import java.util.Collections;
@@ -34,7 +35,7 @@ public class SPdfApplication {
                Runtime rt = Runtime.getRuntime();
                if (os.contains("win")) {
                    // For Windows
-                    rt.exec("rundll32 url.dll,FileProtocolHandler " + url);
+                    SystemCommand.runCommand(rt, "rundll32 url.dll,FileProtocolHandler " + url);
                }
            } catch (Exception e) {
                e.printStackTrace();