- Issue created by @tedbow
- First commit to issue fork.
In \Drupal\automatic_updates\CommandExecutor::create we are just imploding the arguments and then
using \Symfony\Component\Process\Process::fromShellCommandline
We should use escapeshellarg
when creating the arguments and not use fromShellCommandline
Active
3.0
Code