>> A urlCommand like the default "netscape -remote 'openURL(%s)'" >> is OK since the %s is protected by single quotes. > How so? Consider an argument of > '`rm -rf /tmp/test`' xpdf already filters out single and double quotes, so these do not occur in arguments.
