Land #18032, Escape braces after all in cmd/brace encoder

rapid7 · May 30, 2023 · d194cf2 · d194cf2
2 parents 4da0049 + f5bec51
commit d194cf2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/encoders/cmd/brace.rb b/modules/encoders/cmd/brace.rb
@@ -27,7 +27,7 @@ def encode_block(state, buf)
     return buf if state.badchars !~ /\s/
 
     # Perform brace expansion encoding
-    "{#{buf.gsub(',', '\\,').gsub(/\s+/, ',')}}"
+    "{#{buf.gsub(/([{,}])/, '\\\\\1').gsub(/\s+/, ',')}}"
   end
 
 end