Signed-off-by: maipbui <maibui@microsoft.com> Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first. #### Why I did it `subprocess.Popen()` and `subprocess.check_output()` is used with `shell=True`, which is very dangerous for shell injection. #### How I did it Disable `shell=True`, enable `shell=False` #### How to verify it Tested on DUT, compare and verify the output between the original behavior and the new changes' behavior. [testresults.zip](https://github.com/sonic-net/sonic-buildimage/files/9550867/testresults.zip) |
||
---|---|---|
.. | ||
__init__.py | ||
chassis.py | ||
component.py | ||
cpu_thermal_control.py | ||
device_data.py | ||
eeprom.py | ||
fan_drawer.py | ||
fan.py | ||
led.py | ||
module.py | ||
pcie.py | ||
platform.py | ||
psu.py | ||
sfp_event.py | ||
sfp.py | ||
thermal_actions.py | ||
thermal_conditions.py | ||
thermal_infos.py | ||
thermal_manager.py | ||
thermal.py | ||
utils.py | ||
vpd_parser.py | ||
watchdog.py |