rgpg 0.2.2 → 0.2.3

data/lib/rgpg/gem_info.rb

@@ -2,7 +2,7 @@ module Rgpg
   module GemInfo
     MAJOR_VERSION = 0
     MINOR_VERSION = 2
-    PATCH_VERSION = 2
+    PATCH_VERSION = 3
 
     def self.version_string
       [MAJOR_VERSION, MINOR_VERSION, PATCH_VERSION].join('.')

data/lib/rgpg/gpg_helper.rb

@@ -1,4 +1,5 @@
 require 'tempfile'
+require 'shellwords'
 
 module Rgpg
   module GpgHelper
@@ -10,7 +11,7 @@ module Rgpg
       begin
         script_file.write(script)
         script_file.close
-        result = system("gpg --batch --gen-key #{script_file.path}")
+        result = system("gpg --batch --gen-key #{Shellwords.escape(script_file.path)}")
         raise RuntimeError.new('gpg failed') unless result
       ensure
         script_file.close
@@ -62,12 +63,12 @@ module Rgpg
         'gpg',
         '--no-default-keyring'
       ] + args
-      command_line = fragments.join(' ')
+      command_line = fragments.collect { |fragment| Shellwords.escape(fragment) }.join(' ')
 
       output_file = Tempfile.new('gpg-output')
       begin
         output_file.close
-        result = system("#{command_line} > #{output_file.path} 2>&1")
+        result = system("#{command_line} > #{Shellwords.escape(output_file.path)} 2>&1")
       ensure
         output_file.unlink
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rgpg
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.2.3
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-07-31 00:00:00.000000000 Z
+date: 2013-08-01 00:00:00.000000000 Z
 dependencies: []
 description: Simple Ruby wrapper around "gpg" command for file encryption
 email: rcook@rcook.org