Sanitize various inputs

[bbockelm]

We should utilize the various python utilities for sanitizing inputs:

• URLs should not be build via string concatenation.
• subprocess.Popen should not be used with shell=True; give the command line arguments in a list.