From 855acf6791ad658e2712c21ba20e372c03ea37da Mon Sep 17 00:00:00 2001 From: "patched.codes[bot]" <298395+patched.codes[bot]@users.noreply.github.com> Date: Mon, 14 Oct 2024 06:57:53 +0000 Subject: [PATCH 1/2] Patched /tmp/tmptpqg5gjy/main.py --- main.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/main.py b/main.py index 468f8c0..c59b6e0 100644 --- a/main.py +++ b/main.py @@ -18,9 +18,9 @@ def func_calls(): prep = req.prepare() session.rebuild_proxies(prep, proxies) - # Introduce a command injection vulnerability + # Fix the command injection vulnerability user_input = input("Enter a command to execute: ") - command = "ping " + user_input - subprocess.call(command, shell=True) + command = ['ping', user_input] + subprocess.call(command, shell=False) print("Command executed!") \ No newline at end of file From 659657cddfe43be221c6d884d4cd30d9fda2f6d8 Mon Sep 17 00:00:00 2001 From: "patched.codes[bot]" <298395+patched.codes[bot]@users.noreply.github.com> Date: Mon, 14 Oct 2024 06:57:53 +0000 Subject: [PATCH 2/2] Patched /tmp/tmptpqg5gjy/html.js --- html.js | 47 ++++++++++++++++++++++++++--------------------- 1 file changed, 26 insertions(+), 21 deletions(-) diff --git a/html.js b/html.js index d685bd5..168572a 100644 --- a/html.js +++ b/html.js @@ -110,35 +110,40 @@ export default class Html extends PureComponent { {styleElement} -
- {_.map(scripts, (script, key) => ( + ) }