patch CVE-2020-13619

fixes locutusjs#420
divinity76 · Sep 22, 2020 · 04643e5 · 04643e5
1 parent 916f5b4
commit 04643e5
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/php/exec/escapeshellarg.js b/src/php/exec/escapeshellarg.js
@@ -7,9 +7,7 @@ module.exports = function escapeshellarg (arg) {
 
  var ret = ''
 
- ret = arg.replace(/[^\\]'/g, function (m, i, s) {
- return m.slice(0, 1) + '\\\''
- })
+ ret = arg.replace(/\'/g,'\'\\\'\'')
 
  return "'" + ret + "'"
 }