api: quote args when being executed

2021-03-14 13:57:14 +13:00 · 2021-03-14 13:57:14 +13:00 · d529384f21
parent 7b57bef167
commit d529384f21
1 changed files with 1 additions and 1 deletions
--- a/api/src/executor/job.js
+++ b/api/src/executor/job.js
@ -81,7 +81,7 @@ class Job {
            const proc_call = [
                ...prlimit,
                ...unshare,
-                'bash',file, ...args
+                'bash',file, ...args.map(x=>`"${x}"`)
            ];

            var stdout = '';