shlex quote the working directory

Co-authored-by: Nicola Soranzo <[email protected]>
galaxyproject · Aug 7, 2024 · a66b09c · a66b09c
1 parent 639fd54
commit a66b09c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/galaxy/tool_util/deps/singularity_util.py b/lib/galaxy/tool_util/deps/singularity_util.py
@@ -102,7 +102,7 @@ def build_singularity_run_command(
     # the mounting behavior.
     command_parts.append("--contain")
     if working_directory:
-        command_parts.extend(["--pwd", working_directory])
+        command_parts.extend(["--pwd", shlex.quote(working_directory)])
     if cleanenv:
         command_parts.append("--cleanenv")
     if ipc: