On Wed, Jul 2, 2014 at 7:35 PM, Glynn Clements <gl...@gclements.plus.com> wrote:
> kwargs['shell'] = True > args = [self._escape_for_shell(arg) for arg in args] > Considering security issues connected to shell=True* and uncertainty of escaping for MS Windows**, wouldn't be better to avoid shell=True and try to use the right interpreter? This can work at least for the most common (and probably only important) case which is Python. Vaclav * Now thinking about various WPS servers using GRASS, GIS systems using GRASS, and potential WebGRASS. ** It seems that it will be hard to guess how to do it.
_______________________________________________ grass-dev mailing list grass-dev@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/grass-dev