Merge pull request #5 from star7js/pixeebot/drip-2024-06-23-pixee-python/sandbox-process-creation

Author: star7js

python3/hackerutils.py

@@ -5,14 +5,15 @@
 import subprocess
 
 from dotenv import Dotenv
+from security import safe_command
 
 
 def get_dotenv(filename='.env'):
     return Dotenv(str(pathlib.Path(__file__).parent / filename))
 
 
 def sh(*args):
-    proc = subprocess.Popen(args, stdout=subprocess.PIPE)
+    proc = safe_command.run(subprocess.Popen, args, stdout=subprocess.PIPE)
     stdout, _ = proc.communicate()
     return stdout
 

python3/requirements.txt

@@ -2,3 +2,4 @@ dotenv
 twilio
 yagmail
 git+https://github.com/charlierguo/gmail
+security==1.2.1