H-uru/Plasma — pull request #218 by boq (2012-07-24 22:15:19+00:00)
Title: Fix remote code execution through Python.Cheat and Python.RunFile

Previous implementation used simple string concatenation, which allowed remote code injection and execution. In this PR:
- Python.Cheat is rewritten to use safer functions
- Python.RunFile is removed completely. Even with safe implementation, it is possible to execute remote code with SMB or WebDAV (using UNC path)