Did not mean to remove escapeshellarg in ae92d1c.

angrybrad · angrybrad · commit 24ed4ed613fb · 2017-02-09T16:36:54.000-08:00
diff --git a/src/Command.php b/src/Command.php
@@ -159,7 +159,7 @@ public function setCommand($command)
 
             // Absolute path. If it's a relative path, let it slide.
             if ($position) {
-                $command = sprintf($command[$position - 1].': && cd %s && %s', dirname($command), basename($command));
+                $command = sprintf($command[$position - 1].': && cd %s && %s', escapeshellarg(dirname($command)), basename($command));
             }
         }
         $this->_command = $command;

Original file line number	Diff line number	Diff line change
`@@ -159,7 +159,7 @@ public function setCommand($command)`
`159`	`159`
`160`	`160`	`// Absolute path. If it's a relative path, let it slide.`
`161`	`161`	`if ($position) {`
`162`		`- $command = sprintf($command[$position - 1].': && cd %s && %s', dirname($command), basename($command));`
	`162`	`+ $command = sprintf($command[$position - 1].': && cd %s && %s', escapeshellarg(dirname($command)), basename($command));`
`163`	`163`	`}`
`164`	`164`	`}`
`165`	`165`	`$this->_command = $command;`