Comment 2 for bug 335643

Revision history for this message
Matthew Flaschen (matthew-flaschen) wrote : Re: xdg-utils incorrectly parses output, allowing arbitrary text injection

Patches is attached. This fixes the bug for all three methods and moves the exploit to the test directory.