Patched code sample

import subprocess
import tempfile
import os

def execute_user_script(script, timeout=2):
    """Secure function that fixes the vulnerability."""
    # SECURE: This version prevents command injection
    with tempfile.NamedTemporaryFile(mode="w+", suffix=".py", delete=False) as tmp:
        tmp.write(script)
        tmp_path = tmp.name

    try:
        result = subprocess.run(
            ["python", tmp_path],
            capture_output=True,
            text=True,
            timeout=timeout
        )
        print(result.stdout or result.stderr)
    except subprocess.TimeoutExpired:
        print("Error: Script execution timed out.")
    except Exception as e:
        print(f"An error occurred: {e}")
    finally:
        os.remove(tmp_path)

user_script = """
import time
while True:
    time.sleep(1)
"""

execute_user_script(user_script)