disable Shell in subprocess call

L2jLiga · Aug 20, 2021 · 0fbd5ee · 0fbd5ee
1 parent 719a5ab
commit 0fbd5ee
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tasks/engines/fontforge/generate.py b/tasks/engines/fontforge/generate.py
@@ -98,7 +98,7 @@ def generate(filename):
 # Hint the TTF file
 # ttfautohint is optional
 if args['autoHint'] and find_executable('ttfautohint'):
-    call('ttfautohint --symbol --fallback-script=latn --no-info "%(font)s.ttf" "%(font)s-hinted.ttf" && mv "%(font)s-hinted.ttf" "%(font)s.ttf"' % {'font': fontfile}, shell=True)
+    call('ttfautohint --symbol --fallback-script=latn --no-info "%(font)s.ttf" "%(font)s-hinted.ttf" && mv "%(font)s-hinted.ttf" "%(font)s.ttf"' % {'font': fontfile}, shell=False)
     f = fontforge.open(fontfile + '.ttf')
 
 # SVG
@@ -132,7 +132,7 @@ def generate(filename):
 # EOT
 if 'eot' in args['types']:
     # eotlitetool.py script to generate IE7-compatible .eot fonts
-    call('python "%(path)s/../../bin/eotlitetool.py" "%(font)s.ttf" --output "%(font)s.eot"' % {'path': scriptPath, 'font': fontfile}, shell=True)
+    call('python "%(path)s/../../bin/eotlitetool.py" "%(font)s.ttf" --output "%(font)s.eot"' % {'path': scriptPath, 'font': fontfile}, shell=False)
 
 # Delete TTF if not needed
 if ('ttf' not in args['types']) and woff2_generated: