Re: [PATCH] Fix ob-latex.el command injection vulnerability.

[Max Nikulin]

On 18/02/2023 17:08, lux wrote:
> -              (shell-command (format "mv %s %s" img-out out-file)))))
> +              (shell-command (format "mv %s %s" (shell-quote-argument img-out) 
> (shell-quote-argument out-file))))))

Thank you for the patch. Certainly it is an improvement.

Is there any reason why `rename-file' should be avoided here? I just 
have discovered this function, so I am unaware of possible pitfalls.

(info "(elisp) Changing-Files")
https://www.gnu.org/software/emacs/manual/html_node/elisp/Changing-Files.html#index-rename_002dfile