Description of problem: The generic handler of xdg-open (i.e. when not running in KDE, GNOME or XFCE) has the following code:

browserwitharg=echo "$browser" | sed s#%s#"$1"#

if [ x"$browserwitharg" = x"$browser" ]; then "$browser" "$1"; else $browserwitharg; fi

sed interprets any commands in the argument and the result is executed by the script.

Version-Release number of selected component (if applicable): xdg-utils-1.0.2-2.fc8

How reproducible: Always

Steps to Reproduce: 1. uninstall perl-File-MimeInfo package (not necessary with xdg-utils-1.0.2-3) 2. start plain X session 3. xdg-open 'http://foo.org/bar#;g;sx$xtouch:foox' Actual results: File foo created.

Expected results: The page opened in a web browser.

Additional info: