Merge pull request #202 from creative-commoners/pulls/2.0/escape-file-execution

FIX Escape file path before loading file from filesystem

code/model/DMSDocument_Controller.php

@@ -82,6 +82,7 @@ class DMSDocument_Controller extends Controller
                         $finfo = finfo_open(FILEINFO_MIME_TYPE);
                         $mime = finfo_file($finfo, $path);
                     } elseif (is_executable($fileBin)) {
+                        $path = escapeshellarg($path);
                         // try to use the system tool
                         $mime = `$fileBin -i -b $path`;
                         $mime = explode(';', $mime);