Safe usage of popen

[tjruwase]

Avoid shell=True security issues with Popen

[tohtana]

Great fixes @tjruwase,
I think subprocess.run and subprocess.check_output have the same security risk. Shall we fix all? We can grep all with shell=True.

[tjruwase]

I think subprocess.run and subprocess.check_output have the same security risk. Shall we fix all? We can grep all with shell=True.

@tohtana. good point. I will address others in separate PR since this one needs to be released immediately.

@loadams, can we please create a release once this is merged? Thanks!

[loadams]

I think subprocess.run and subprocess.check_output have the same security risk. Shall we fix all? We can grep all with shell=True.

@tohtana. good point. I will address others in separate PR since this one needs to be released immediately.

@loadams, can we please create a release once this is merged? Thanks!

@tjruwase - yes, I'll ensure this PR is merged and we will do a release shortly after.