Quoting merging input path

alterakey · Sep 10, 2024 · 2c34e27 · 2c34e27
1 parent f2b4f6a
commit 2c34e27
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/trueseeing/core/android/context.py b/trueseeing/core/android/context.py
@@ -4,6 +4,7 @@
 import lxml.etree as ET
 import os
 import re
+import shlex
 from functools import cache
 
 from pubsub import pub
@@ -392,7 +393,7 @@ async def _analyze(self, level: int) -> None:
       with toolchains() as tc:
         async for l in invoke_streaming('java -jar {apkeditor} m -i {target} -o {outfile}'.format(
             apkeditor=tc['apkeditor'],
-            target=self.target,
+            target=shlex.quote(self.target),
             outfile=outfile,
         )):
           ui.info(l.decode())