From d529384f219c6e82e25903922eb623ae57a35417 Mon Sep 17 00:00:00 2001
From: Thomas Hobson <git@hexf.me>
Date: Sun, 14 Mar 2021 13:57:14 +1300
Subject: [PATCH] api: quote args when being executed

---
 api/src/executor/job.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/src/executor/job.js b/api/src/executor/job.js
index ba739c4..9e48399 100644
--- a/api/src/executor/job.js
+++ b/api/src/executor/job.js
@@ -81,7 +81,7 @@ class Job {
             const proc_call = [
                 ...prlimit,
                 ...unshare,
-                'bash',file, ...args
+                'bash',file, ...args.map(x=>`"${x}"`)
             ];
 
             var stdout = '';