Merge pull request #4 from jaraco/bugfix/any-filename

Let subprocess module handle argument escaping
businho · Jul 31, 2023 · 16004c5 · 16004c5
2 parents 4c2608d + 52c0ac9
commit 16004c5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pytest_ruff.py b/pytest_ruff.py
@@ -81,8 +81,8 @@ def reportinfo(self):
 
 def check_file(path):
     ruff = find_ruff_bin()
-    command = f"{ruff} {path} --quiet --show-source"
-    child = Popen(command, shell=True, stdout=PIPE, stderr=PIPE)
+    command = [ruff, path, '--quiet', '--show-source']
+    child = Popen(command, stdout=PIPE, stderr=PIPE)
     stdout, _ = child.communicate()
     if stdout:
         raise RuffError(stdout.decode())