treewide: filter shell arguments through shellquote() where applicable

[project/luci.git] / modules / luci-base / luasrc / model / uci.lua

diff --git a/modules/luci-base/luasrc/model/uci.lua b/modules/luci-base/luasrc/model/uci.lua
index 3208f3b..bbd9b4c 100644 (file)
--- a/modules/luci-base/luasrc/model/uci.lua
+++ b/modules/luci-base/luasrc/model/uci.lua
@@ -407,7 +407,7 @@ function apply(self, configlist, command)
                return { "/sbin/luci-reload", unpack(configlist) }
        else
                return os.execute("/sbin/luci-reload %s >/dev/null 2>&1"
                return { "/sbin/luci-reload", unpack(configlist) }
        else
                return os.execute("/sbin/luci-reload %s >/dev/null 2>&1"

-                       % table.concat(configlist, " "))
+                       % util.shellquote(table.concat(configlist, " ")))

        end
 end
 
        end
 end