{"comment":{"created_at":"2011-10-12T16:04:26Z","body":"Resend this PR against `develop` branch. All development happens there","updated_at":"2011-10-12T16:04:26Z","url":"https://api.github.com/repos/Behat/Mink/issues/comments/2380960","id":2380960,"user":{"avatar_url":"https://secure.gravatar.com/avatar/f742011db78e0c681ed4bc885bfee982?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","url":"https://api.github.com/users/everzet","id":30813,"login":"everzet"}},"action":"created","issue":{"number":101,"created_at":"2011-10-12T15:59:15Z","pull_request":{"diff_url":"https://github.com/Behat/Mink/pull/101.diff","patch_url":"https://github.com/Behat/Mink/pull/101.patch","html_url":"https://github.com/Behat/Mink/pull/101"},"body":"Hi there, in `BaseMinkContext::showLastResponse()` the path of the temporary file is passed to system() unescaped. If `show_tmp_dir` has any special characters in it (such as a space), this can cause unexpected results (in the case of white space, the path will be interpreted as multiple arguments).\r\n\r\nThis patch uses escapeshellarg() to escape and quote the path.","comments":1,"title":"Escape file path passed to the show_cmd to ensure the argument is valid","updated_at":"2011-10-12T16:04:26Z","url":"https://api.github.com/repos/Behat/Mink/issues/101","id":1888835,"assignee":null,"milestone":null,"closed_at":"2011-10-12T16:04:26Z","user":{"avatar_url":"https://secure.gravatar.com/avatar/1496b8171a80c09be580414afa013b6a?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","url":"https://api.github.com/users/mrtorrent","id":60119,"login":"mrtorrent"},"html_url":"https://github.com/Behat/Mink/issues/101","labels":[],"state":"closed"},"legacy":{"issue_id":1888835,"comment_id":2380960}}