Escape the notify-send path when getting the version number

squizlabs · Feb 27, 2017 · 254ced6 · 254ced6
1 parent 029305e
commit 254ced6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/CodeSniffer/Reports/Notifysend.php b/CodeSniffer/Reports/Notifysend.php
@@ -82,7 +82,7 @@ public function __construct()
     {
         $path = PHP_CodeSniffer::getConfigData('notifysend_path');
         if ($path !== null) {
-            $this->path = $path;
+            $this->path = escapeshellcmd($path);
         }
 
         $timeout = PHP_CodeSniffer::getConfigData('notifysend_timeout');
@@ -246,7 +246,7 @@ protected function notifyErrors($msg)
      */
     protected function getBasicCommand()
     {
-        $cmd  = escapeshellcmd($this->path);
+        $cmd  = $this->path;
         $cmd .= ' --category dev.validate';
         $cmd .= ' -h int:transient:1';
         $cmd .= ' -t '.(int) $this->timeout;