Fix CodeQL findings (#58)

* Potential fix for code scanning alert no. 4: Incomplete string escaping or encoding

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 3: Incomplete string escaping or encoding

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Use `replaceAll` instead of `replace`

Co-authored-by: Mark Cafaro <34887852+mcafaro@users.noreply.github.com>

* Update buildtool.unit.test.ts

* bump compiler target to support replaceAll

* Update tsconfig.json

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Mark Cafaro <34887852+mcafaro@users.noreply.github.com>
Co-authored-by: David Buzinski <davidb@vdi-lsddp-236.dhcp.mathworks.com>

Author: 4 people

src/buildtool.ts

@@ -7,7 +7,7 @@ export interface RunBuildOptions {
 }
 
 export function generateCommand(options: RunBuildOptions): string {
-    const pluginsPath = path.join(__dirname,"plugins").replace("'","''");
+    const pluginsPath = path.join(__dirname,"plugins").replaceAll("'","''");
     let command: string = "addpath('"+ pluginsPath +"'); buildtool"
     if (options.Tasks) {
         command = command + " " + options.Tasks;

src/buildtool.unit.test.ts

@@ -4,7 +4,7 @@ import * as path from "path";
 import * as buildtool from "./buildtool";
 
 describe("command generation", () => {
-const command = "addpath('"+ path.join(__dirname, "plugins").replace("'","''") +"'); buildtool"
+const command = "addpath('"+ path.join(__dirname, "plugins").replaceAll("'","''") +"'); buildtool"
     it("buildtool invocation with unspecified tasks and build options", () => {
         const options: buildtool.RunBuildOptions = {
             Tasks: "",

tsconfig.json

@@ -1,6 +1,6 @@
 {
     "compilerOptions": {
-        "target": "ES6",
+        "target": "ES2022",
         "module": "CommonJS",
         "declaration": true,
         "sourceMap": true,