Fix command injection vulnerability in subprocess calls.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-21 04:00:05 +00:00
parent b70341a062
commit 0a44b06b6d
2 changed files with 3 additions and 1 deletions
@@ -78,6 +78,7 @@ def _convert_pdf_to_pdfa(input_path: str, output_path: str, pdfa_format: str = "
        output_type,
        "--quiet",
        "--invalidate-digital-signatures",
+        "--",
        input_path,
        output_path,
    ]