escapeshellarg (#17)

a project path may have spaces or other characters that need to be escaped
roots · Aug 17, 2018 · f511e9a · f511e9a
1 parent 0c0e962
commit f511e9a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/ComposerScript.php b/src/ComposerScript.php
@@ -20,7 +20,7 @@ public function __construct(Event $event = null)
 
     public static function postCreateProject(Event $event)
     {
-        $sage = dirname(__DIR__).'/bin/sage';
+        $sage = escapeshellarg(dirname(__DIR__).'/bin/sage');
         (new static($event))
             ->validate()
             ->run(new Process(sprintf('php %s %s', $sage, 'meta')))