fixes for command inject

This commit is contained in:
lily 2026-09-14 11:23:46 -04:00
parent 233b64a51d
commit 30afcf5d59

View file

@ -2,6 +2,7 @@
import os
import re
import secrets
import subprocess
import xml.dom.minidom
from dataclasses import dataclass
from datetime import datetime, timedelta
@ -241,8 +242,8 @@ def batch():
except ValueError:
return "Invalid season", 400
ret = os.system(" ".join(["nyaa-batch", "-t", "'{}'".format(title), "-s", str(season), "-l", "'{}'".format(link)]))
if ret == 0:
result = subprocess.run(["nyaa-batch", "-t", title, "-s", str(season), "-l", link])
if result.returncode == 0:
return "OK", 200
else:
return "Error", 500