Security bugfix: bzr.rb could be exploited

1 files changed, 2 insertions, 2 deletions

diff --git a/bzr.rb b/bzr.rb
index cd1fe20..c3f4190 100644
--- a/bzr.rb
+++ b/bzr.rb
@@ -13,7 +13,7 @@ class VCS
 	end
 
 	def VCS.cat revision, file
-		`#{BZRCMD} cat -r #{revision} #{file}`
+		`#{BZRCMD} cat -r #{revision.to_i} #{file}`
 	end
 
 	def VCS.history
@@ -21,6 +21,6 @@ class VCS
 	end
 
 	def VCS.commit comment
-		`#{BZRCMD} commit -m '#{comment}'`
+		`#{BZRCMD} commit -m \"#{comment}\"`
 	end
 end