Shell command is exposed.

[jijoongmoon]

When I use the PR Report Handler in "Standalone Continuous Integration Server" Web Interface, there is shell command exposed as below.

ID and Pasword is correct.
Running the PR comment handler ...
Updating the PR status.
shell_exec("./pr-handler-runner.sh "success" "TAOS/pr-postbuild-build-android" ":octocat:[TEST] The current status is chaged by a web-based PR handler." "bdb3d6f3a67cd2d9447f6d63a7cb52563d9430f6"")

It's okay, The PR handler completed your request.

[taos-ci]

cibot: Thank you for posting issue #609. The person in charge will reply soon.

[leemgs]

It seems that the issue is not still fixed.