>> A urlCommand like the default "netscape -remote 'openURL(%s)'"
>> is OK since the %s is protected by single quotes.

> How so? Consider an argument of
> '`rm -rf /tmp/test`'

xpdf already filters out single and double quotes, so
these do not occur in arguments.

[ reply ]