From daf58de74695aa2bb13afb85bf2756d2cb0f206d Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Sat, 12 Sep 2026 21:20:32 +0000
Subject: [PATCH 1/3] =?UTF-8?q?sandboxed=5Fweb=5Fe2e.py=20=ED=8C=8C?=
 =?UTF-8?q?=EC=9D=BC=20=EB=82=B4=20subprocess=20=ED=98=B8=EC=B6=9C?=
 =?UTF-8?q?=EC=97=90=20=EB=AA=85=EC=8B=9C=EC=A0=81=EC=9D=B8=20shell=3DFals?=
 =?UTF-8?q?e=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scripts/ci/sandboxed_web_e2e.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/scripts/ci/sandboxed_web_e2e.py b/scripts/ci/sandboxed_web_e2e.py
index b0376c0822..f6d9d33fe0 100644
--- a/scripts/ci/sandboxed_web_e2e.py
+++ b/scripts/ci/sandboxed_web_e2e.py
@@ -240,6 +240,7 @@ def _probe_isolation_capability(backend: str) -> None:
                 text=True,
                 timeout=10,
                 check=False,
+                shell=False,
             )
         except (OSError, subprocess.TimeoutExpired) as exc:
             raise RuntimeError(f"bubblewrap capability probe could not run: {exc}") from exc
@@ -452,13 +453,13 @@ def start_service(label: str, command: str, cwd: Path, env: dict[str, str], logs
     log_file = log_path.open("w", encoding="utf-8")
     process = subprocess.Popen(
         shlex.split(command),
+        shell=False,
         cwd=cwd,
         env=env,
         text=True,
         stdout=log_file,
         stderr=subprocess.STDOUT,
         start_new_session=True,
-        shell=False,
     )
     log_file.close()
     return Service(label=label, command=command, process=process, log_path=log_path)
@@ -593,6 +594,7 @@ def run_shell(command: str, cwd: Path, env: dict[str, str], timeout: int) -> sub
     """Run a shell command and capture its output."""
     return subprocess.run(
         shlex.split(command),
+        shell=False,
         cwd=cwd,
         env=env,
         text=True,
@@ -600,7 +602,6 @@ def run_shell(command: str, cwd: Path, env: dict[str, str], timeout: int) -> sub
         stderr=subprocess.PIPE,
         timeout=timeout,
         check=False,
-        shell=False,
     )
 
 

From b5ae295c6c33974316e2dbd6bcce4b7bd5605ec8 Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Sat, 12 Sep 2026 21:31:28 +0000
Subject: [PATCH 2/3] =?UTF-8?q?sandboxed=5Fweb=5Fe2e.py=20=ED=8C=8C?=
 =?UTF-8?q?=EC=9D=BC=20=EB=82=B4=20subprocess=20=ED=98=B8=EC=B6=9C?=
 =?UTF-8?q?=EC=97=90=20=EB=AA=85=EC=8B=9C=EC=A0=81=EC=9D=B8=20shell=3DFals?=
 =?UTF-8?q?e=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit


From 008f3915606051adc32708e349fe32619256ae52 Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Sat, 12 Sep 2026 21:39:53 +0000
Subject: [PATCH 3/3] =?UTF-8?q?sandboxed=5Fweb=5Fe2e.py=20=ED=8C=8C?=
 =?UTF-8?q?=EC=9D=BC=20=EB=82=B4=20subprocess=20=ED=98=B8=EC=B6=9C?=
 =?UTF-8?q?=EC=97=90=20=EB=AA=85=EC=8B=9C=EC=A0=81=EC=9D=B8=20shell=3DFals?=
 =?UTF-8?q?e=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit