SquirrelMail WebMail S/MIME Plugin unfiltered shell characters problem

Data from user's certificate is used to invoke external application without filtering...