$NetBSD: patch-al,v 1.1 2008/07/25 02:55:27 tonnerre Exp $

--- file/search.cgi.orig	2007-09-21 23:26:33.000000000 +0200
+++ file/search.cgi
@@ -17,16 +17,16 @@ if ($in{'dir'} ne '/') {
 	}
 $cmd = "find ".quotemeta(&unmake_chroot($in{'dir'}))." -name ".quotemeta($in{'match'});
 if ($in{'type'}) {
-	$cmd .= " -type $in{'type'}";
+	$cmd .= " -type " . quotemeta($in{'type'});
 	}
 if ($in{'user'}) {
-	$cmd .= " -user $in{'user'}";
+	$cmd .= " -user " . quotemeta($in{'user'});
 	}
 if ($in{'group'}) {
-	$cmd .= " -group $in{'group'}";
+	$cmd .= " -group " . quotemeta($in{'group'});
 	}
 if ($in{'size'}) {
-	$cmd .= " -size $in{'size'}";
+	$cmd .= " -size " . quotemeta($in{'size'});
 	}
 if ($in{'xdev'}) {
 	$cmd .= " -mount";