(no commit message)

diff --git a/MagickCore/delegate.c b/MagickCore/delegate.c
index 8cf87464eb6b9163c0c5043a73cdbc3bcca56364..17757f4343bdd43a48b3e71ac2b2159c829b7751 100644 (file)
--- a/MagickCore/delegate.c
+++ b/MagickCore/delegate.c
@@ -906,8 +906,8 @@ static char *SanitizeDelegateCommand(const char *command)
 
   static char
     whitelist[] =
-      "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-"
-      ".@&;<>|\\\'\":%";
+      "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_- "
+      ".@&;<>|/\\\'\":%";
 
   sanitize_command=AcquireString(command);
   p=sanitize_command;

diff --git a/MagickCore/utility.c b/MagickCore/utility.c
index 78aa53c347d69fdae9bdc4e344fee65ea1ae6ea1..dedbfca6d4e14ed8c6ce4a36c8921571ba8465c8 100644 (file)
--- a/MagickCore/utility.c
+++ b/MagickCore/utility.c
@@ -1930,8 +1930,8 @@ static char *SanitizeSystemCommand(const char *command)
 
   static char
     whitelist[] = 
-      "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-"
-      ".@&;<>|\\\'\":%";
+      "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_- "
+      ".@&;<>|/\\\'\":%";
 
   sanitize_command=AcquireString(command);
   p=sanitize_command;