Merge pull request #1 from alromh87/updateGry

Fix Arbitary Code Execution

Author: JamieSlome

lib/index.js

@@ -13,7 +13,6 @@ var Ul = require("ul")
   , ChildProcess = require("child_process")
   , Deffy = require("deffy")
   , Typpy = require("typpy")
-  , Exec = ChildProcess.exec
   , Spawn = ChildProcess.spawn
   , IterateObject = require("iterate-object")
   ;
@@ -528,7 +527,7 @@ GitStats.prototype.ansiCalendar = function (options, callback) {
  */
 GitStats.prototype.authors = function (options, callback) {
     var repo = new Gry(options.repo);
-    repo.exec(`shortlog -s -n --all --since "${options.start.toString()}" --until "${options.end.toString()}"`, function (err, stdout) {
+    repo.exec(['shortlog', '-s', '-n', '--all', '--since', options.start.toString(), '--until', options.end.toString()], function (err, stdout) {
         if (err) { return callback(err); }
         var lines = stdout.split("\n");
         var pieData = stdout.split("\n").map(function (c) {

package.json

@@ -39,7 +39,7 @@
     "cli-pie": "^2.0.0",
     "deffy": "^2.2.2",
     "gitlog-parser": "0.0.4",
-    "gry": "^5.0.4",
+    "gry": "^6.1.0",
     "is-there": "^4.0.0",
     "iterate-object": "^1.1.0",
     "moment": "^2.9.0",