Fix: cmd_status: call crm_mon without shell (#1429)

[nicholasyang2022]

crm status ... appends tail arguments to the crm_mon -1 without quoting or escaping. This is unsafe as they will be parsed as a shell command.

This patch changes how crmsh calls crm_mon. Arguments is passed as string arrays instead of shell cmdline.

Fixes #1429.

[codecov]

Codecov Report

Attention: Patch coverage is 80.00000% with 1 lines in your changes are missing coverage. Please review.

Project coverage is 53.72%. Comparing base (c723009) to head (1fb36b5).

Files	Patch %	Lines
crmsh/cmd_status.py	80.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1430   +/-   ##
=======================================
  Coverage   53.72%   53.72%           
=======================================
  Files          80       80           
  Lines       24073    24073           
=======================================
  Hits        12934    12934           
  Misses      11139    11139           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[liangxin1300]

Thanks!