* tools/server-side/svnpubsub/commit-hook.py (svncmd):
   Do not pass command through the shell to avoid shell command injection.


git-svn-id: https://svn.apache.org/repos/asf/subversion/trunk@1486466 13f79535-47bb-0310-9956-ffa450edef68
* tools/server-side/svnpubsub/revprop-change-hook.py (svncmd):
   Do not pass command through the shell to avoid shell command injection.


git-svn-id: https://svn.apache.org/repos/asf/subversion/trunk@1486467 13f79535-47bb-0310-9956-ffa450edef68