MAGETWO-42038: RCE/DOS via cron.php

- Fixed security issue related to possible execution of shell commands or ShellShock.

Author: safwkhan

pub/cron.php

@@ -23,6 +23,9 @@
     if (empty($opt['group'])) {
         $opt['group'] = 'default';
     }
+    foreach ($opt as $key => $value) {
+        $opt[$key] = escapeshellarg($value);
+    }
     $opt['standaloneProcessStarted'] = '0';
     $params = $_SERVER;
     $params[StoreManager::PARAM_RUN_CODE] = 'admin';