escape arguments

13 years ago · adfac9e34b
parent ae15d8a5b6
commit adfac9e34b
1 changed files with 6 additions and 2 deletions
--- a/src/Composer/Repository/Vcs/SvnDriver.php
+++ b/src/Composer/Repository/Vcs/SvnDriver.php
@ -218,8 +218,12 @@ class SvnDriver extends VcsDriver implements VcsDriverInterface
        if ($this->useAuth !== true) {
            return '';
        }
-        $str = ' --no-auth-cache --username "%s" --password "%s" ';
-        return sprintf($str, $this->svnUsername, $this->svnPassword);
+        $str = ' --no-auth-cache --username %s --password %s ';
+        return sprintf(
+            $str,
+            escapeshellarg($this->svnUsername),
+            escapeshellarg($this->svnPassword)
+        );
    }

    /**