`py2lcov` and `xml2lcov`: Fix command injection from `subprocess.run([..], shell=True, [..])` (fixes #350)#356

henry2cox merged 3 commits intolinux-test-project:masterlinux-test-project/lcov:masterfrom

hartwork:issue-350-fix-subprocess-shell-true-command-injectionhartwork/lcov-fork:issue-350-fix-subprocess-shell-true-command-injectionCopy head branch name to clipboard