From 49019cb2db3678a2bff407f18e258d7be0c2b687 Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Sun, 13 Sep 2026 15:19:22 -0700
Subject: [PATCH] Make sure param values are quoted

---
 custom/custom-lib.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/custom/custom-lib.pl b/custom/custom-lib.pl
index 333b24885..f435dc27b 100755
--- a/custom/custom-lib.pl
+++ b/custom/custom-lib.pl
@@ -481,7 +481,7 @@ foreach my $a (@{$cmd->{'args'}}) {
 		&error(&text('run_emust', $a->{'desc'}));
 		}
 	$ENV{$n} = $rv;
-	$env .= "$n='$rv'\n";
+	$env .= "$n=".quotemeta($rv)."\n";
 	$export .= " $n";
 	if ($a->{'quote'}) {
 		$str =~ s/\$$n/"\$$n"/g;