Changed behavior of subprocess.Popen call so shell=False and program isn't vulnerable to pdf names executing arbitrary shell commands.
Changed behavior of subprocess.Popen call so shell=False and program isn't vulnerable to pdf names executing arbitrary shell commands.

dwillcox/pybib