Fix shell injection via shell=True in subprocess calls#23894

carljm merged 4 commits intoastral-sh:mainastral-sh/ruff:mainfrom

vladapostol1:fix/subprocess-shell-injectionvladapostol1/ruff:fix/subprocess-shell-injectionCopy head branch name to clipboard