From 55d6d957c2bd295ae7d4607555b4834363aea88d Mon Sep 17 00:00:00 2001
From: Steven Wichers <steven.wichers@acquia.com>
Date: Fri, 7 Apr 2017 18:32:00 -0700
Subject: [PATCH] Issue #1328: Example of problem areas and fixes.

---
 phing/phingcludes/DrushTask.php | 2 +-
 phing/tasks/properties.xml      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/phing/phingcludes/DrushTask.php b/phing/phingcludes/DrushTask.php
index 076951cd7d..c5ba4f870f 100644
--- a/phing/phingcludes/DrushTask.php
+++ b/phing/phingcludes/DrushTask.php
@@ -246,7 +246,7 @@ public function init() {
   public function main() {
     $command = array();
 
-    $command[] = !empty($this->bin) ? $this->bin : 'drush';
+    $command[] = !empty($this->bin) ? escapeshellarg($this->bin) : 'drush';
 
     if (!empty($this->alias)) {
       $command[] = '@' . $this->alias;
diff --git a/phing/tasks/properties.xml b/phing/tasks/properties.xml
index 66f323ac1b..355f0c6f72 100644
--- a/phing/tasks/properties.xml
+++ b/phing/tasks/properties.xml
@@ -39,7 +39,7 @@
       <exec dir="${repo.root}" command="echo '8.5.2' >> ${blt.config-files.schema-version}" checkreturn="true" logoutput="true" passthru="false" level="${blt.exec_level}"/>
     </then>
   </if>
-  <exec dir="${repo.root}" command="cat ${blt.config-files.schema-version}" outputProperty="blt.schema-version" checkreturn="true" logoutput="false" level="${blt.exec_level}"/>
+  <exec dir="${repo.root}" command="cat '${blt.config-files.schema-version}'" outputProperty="blt.schema-version" checkreturn="true" logoutput="false" level="${blt.exec_level}"/>
   <!-- Send errors to /dev/null, for environments like ACE without composer. -->
   <exec dir="${repo.root}" command="composer info acquia/blt --no-ansi 2> /dev/null | grep versions | awk '{print $4}'" outputProperty="blt.version" logoutput="false" checkreturn="true" level="${blt.exec_level}" />