Potential fix for code scanning alert no. 20: Incomplete string escaping or encoding

BioPhoton · github-advanced-security[bot] · web-flow · commit 04e96bc86ad9 · 2025-10-04T12:50:48.000+02:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/packages/utils/src/lib/command.ts b/packages/utils/src/lib/command.ts
@@ -16,7 +16,7 @@ export type CliArgsObject<T extends object = Record<string, ArgumentValue>> =
 export function escapeCliArgs(args: string[]): string[] {
   return args.map(arg => {
     if (arg.includes(' ') || arg.includes('"') || arg.includes("'")) {
-      return `"${arg.replace(/"/g, '\\"')}"`;
+      return `"${arg.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
     }
     return arg;
   });

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,7 @@ export type CliArgsObject<T extends object = Record<string, ArgumentValue>> =`
`16`	`16`	`export function escapeCliArgs(args: string[]): string[] {`
`17`	`17`	`return args.map(arg => {`
`18`	`18`	`if (arg.includes(' ') \|\| arg.includes('"') \|\| arg.includes("'")) {`
`19`		- return `"${arg.replace(/"/g, '\\"')}"`;
	`19`	+ return `"${arg.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
`20`	`20`	`}`
`21`	`21`	`return arg;`
`22`	`22`	`});`