fix(split-tunnel): parse Exec= paths per XDG desktop entry spec (#5122) (#5136)

Author: agentpietrucha

nym-vpn-app/src/screens/settings/split-tunneling/SplitTunneling.tsx

@@ -12,7 +12,7 @@ import { Spinner } from '../../../ui';
 import InfoDialog from './InfoDialog';
 import LaunchConfirmDialog from './LaunchConfirmDialog';
 import AppItem, { AppEntry } from './AppItem';
-import { useSplitTunnel } from './utils';
+import { parseExecArgs, useSplitTunnel } from './utils';
 import { PROBLEMATIC_APPS } from './utils/constants';
 
 function SplitTunneling() {
@@ -35,7 +35,7 @@ function SplitTunneling() {
       try {
         const command = Command.create(
           'nym-exclude',
-          app.executable_path.split(' '),
+          parseExecArgs(app.executable_path),
         );
 
         command.on('close', (data) => {

nym-vpn-app/src/screens/settings/split-tunneling/utils/index.ts

@@ -1 +1,2 @@
 export * from './useSplitTunnel';
+export * from './parseExec';

nym-vpn-app/src/screens/settings/split-tunneling/utils/parseExec.ts

@@ -0,0 +1,29 @@
+/**
+ * Parses a desktop entry Exec= value into an argument list suitable for
+ * passing to Command.create().
+ *
+ * Per the XDG Desktop Entry Specification:
+ * - If the executable path contains spaces it MUST be wrapped in double quotes
+ *   and spaces inside the quoted path MUST be escaped as \s.
+ * - Arguments following the executable are separated by regular spaces.
+ *
+ * Examples:
+ *   '/usr/bin/firefox'               → ['/usr/bin/firefox']
+ *   '/usr/bin/app --flag'            → ['/usr/bin/app', '--flag']
+ *   '"/opt/My\sApp/app" --flag'      → ['/opt/My App/app', '--flag']
+ */
+export function parseExecArgs(exec: string): string[] {
+  const trimmed = exec.trim();
+
+  if (trimmed.startsWith('"')) {
+    const closingQuote = trimmed.indexOf('"', 1);
+    if (closingQuote !== -1) {
+      const path = trimmed.slice(1, closingQuote).replace(/\\s/g, ' ');
+      const rest = trimmed.slice(closingQuote + 1).trim();
+      return [path, ...rest.split(' ').filter(Boolean)];
+    }
+  }
+
+  // Unquoted path: split on spaces as before
+  return trimmed.split(' ').filter(Boolean);
+}