fixes for command inject

This commit is contained in:
lily 2026-09-14 11:23:46 -04:00
parent 233b64a51d
commit 30afcf5d59

View file

@ -2,6 +2,7 @@
import os import os
import re import re
import secrets import secrets
import subprocess
import xml.dom.minidom import xml.dom.minidom
from dataclasses import dataclass from dataclasses import dataclass
from datetime import datetime, timedelta from datetime import datetime, timedelta
@ -241,8 +242,8 @@ def batch():
except ValueError: except ValueError:
return "Invalid season", 400 return "Invalid season", 400
ret = os.system(" ".join(["nyaa-batch", "-t", "'{}'".format(title), "-s", str(season), "-l", "'{}'".format(link)])) result = subprocess.run(["nyaa-batch", "-t", title, "-s", str(season), "-l", link])
if ret == 0: if result.returncode == 0:
return "OK", 200 return "OK", 200
else: else:
return "Error", 500 return "Error", 500