Fix potential RCE vulnerability (#139)

Co-authored-by: Alexandru Salajan <salajan@adobe.com>
adobe · Jun 21, 2023 · 9380dd9 · 9380dd9
1 parent b184aaf
commit 9380dd9
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/ops/cli/aws.py b/src/ops/cli/aws.py
@@ -9,13 +9,14 @@
 # governing permissions and limitations under the License.
 
 from . import get_output
+from shlex import quote
 
 
 def access_key(profile):
     return get_output(
-        'aws configure get aws_access_key_id --profile %s' % profile)
+        'aws configure get aws_access_key_id --profile %s' % quote(profile))
 
 
 def secret_key(profile):
     return get_output(
-        'aws configure get aws_secret_access_key --profile %s' % profile)
+        'aws configure get aws_secret_access_key --profile %s' % quote(profile))