Dangerous call to bash shell allows command injection

[Nyre221]

Due to the shortcut script written in bash and the way the subprocesses were called in python, QuickView is probably susceptible to command injection via file name.

Nyre221/Kiview#5
QuickView doesn't appear to be affected by the same command as Kiview but is likely affected in other ways.

I have no intention of keeping the python version updated since I released the C++ version.

I am making this report to warn users of this possible vulnerability.