Escape the configuration name (or derived values) when executing commands

Author: Thomvis

lib/cocoapods-binary-cache/pod-rome/xcodebuild_command.rb

@@ -102,16 +102,16 @@ def create_xcframework(target)
       # for each sdk, the order of params must be -framework then -debug-symbols
       # to prevent duplicated file error when copying dSYMs
       sdks.each do |sdk|
-        cmd << "-framework" << framework_path_of(target, sdk)
+        cmd << "-framework" << framework_path_of(target, sdk).shellescape
 
         unless disable_dsym?
           dsyms = dsym_paths_of(target, sdk)
-          cmd += dsyms.map { |dsym| "-debug-symbols #{dsym}" }
+          cmd += dsyms.map { |dsym| "-debug-symbols #{dsym.shellescape}" }
         end
 
         if bitcode_enabled?
           bcsymbolmaps = bcsymbolmap_paths_of(target, sdk)
-          cmd += bcsymbolmaps.map { |bcsymbolmap| "-debug-symbols #{bcsymbolmap}" }
+          cmd += bcsymbolmaps.map { |bcsymbolmap| "-debug-symbols #{bcsymbolmap.shellescape}" }
         end
       end
 
@@ -181,7 +181,7 @@ def merge_contents(target, path_suffix, &merger)
     def create_fat_binary(options)
       cmd = ["lipo", " -create"]
       cmd << "-output" << options[:output]
-      cmd << options[:simulator] << options[:device]
+      cmd << options[:simulator].shellescape << options[:device].shellescape
       `#{cmd.join(" ")}`
     end
 

lib/cocoapods-binary-cache/pod-rome/xcodebuild_raw.rb

@@ -21,7 +21,7 @@ def self.xcodebuild(options)
       cmd = ["xcodebuild"]
       cmd << "-project" << options[:sandbox].project_path.realdirpath.shellescape
       targets.each { |target| cmd << "-target" << target }
-      cmd << "-configuration" << options[:configuration]
+      cmd << "-configuration" << options[:configuration].shellescape
       cmd << "-sdk" << sdk
       if DESTINATION_OF_SDK.key?(sdk)
         cmd << "-destination" << DESTINATION_OF_SDK[sdk]