Skip to content

Commit 7ef6c5e

Browse files
Potential fix for code scanning alert no. 7: Unsafe shell command constructed from library input
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Mustapha BARKI <code4yo@gmail.com>
1 parent 0310507 commit 7ef6c5e

File tree

1 file changed

+0
-2
lines changed

1 file changed

+0
-2
lines changed

packages/core/src/utils/editor.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@
55
*/
66

77
import { execSync, spawn } from 'child_process';
8-
import * as shellQuote from 'shell-quote';
98

109
export type EditorType =
1110
| 'vscode'
@@ -174,7 +173,6 @@ export async function openDiff(
174173
return new Promise((resolve, reject) => {
175174
const childProcess = spawn(diffCommand.command, diffCommand.args, {
176175
stdio: 'inherit',
177-
shell: true,
178176
});
179177

180178
childProcess.on('close', (code) => {

0 commit comments

Comments
 (0)