From f5b972f1b3c1a9312d38257fdfa77d53e0746d2d Mon Sep 17 00:00:00 2001 From: tomaioo Date: Thu, 23 Jul 2026 05:27:42 -0700 Subject: [PATCH] fix(security): 2 improvements across 1 files - Security: Command Injection via os.system in Formatting Script - Quality: Command injection vulnerability in formatting script Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com> --- format.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/format.py b/format.py index 4b886db0a8..2e59418c28 100644 --- a/format.py +++ b/format.py @@ -1,6 +1,6 @@ -import os import glob +import subprocess for filename in glob.glob('./**/*.py', recursive=True): print(filename) - os.system(f"autopep8 --max-line-length 140 --in-place --aggressive --aggressive {filename}") + subprocess.run(['autopep8', '--max-line-length', '140', '--in-place', '--aggressive', '--aggressive', filename])