Escape more chars

package.json

@@ -64,7 +64,8 @@
         },
         "stripe.projectName": {
           "type": "string",
-          "description": "the project name to read from for config (default \"default\")"
+          "description": "the project name to read from for config (default \"default\")",
+          "pattern": "^[a-zA-Z0-9_-\\s]+$"
         },
         "stripe.telemetry.enabled": {
           "type": "boolean",

src/stripeTerminal.ts

@@ -38,23 +38,30 @@ export class StripeTerminal {
       'stripe',
       new vscode.ShellExecution(cliPath, [
         command,
-        ...args.map((arg) => ({
-          quoting: vscode.ShellQuoting.Strong,
-          value: arg,
-        })),
-        ...globalCLIFlags.map((arg) => ({
-          quoting: vscode.ShellQuoting.Strong,
-          value: arg,
-        })),
-      ])
+        ...args,
+        ...globalCLIFlags
+      ],
+      {
+        shellQuoting: {
+          escape: {
+            escapeChar: '\\',
+            charsToEscape: '&`|"\'',
+          }
+        }
+      }
+    )
     ));
   }
 
   // The Stripe CLI supports a number of flags for every command. See https://stripe.com/docs/cli/flags
   private getGlobalCLIFlags(): Array<string> {
     const stripeConfig = vscode.workspace.getConfiguration('stripe');
 
-    const projectName = stripeConfig.get('projectName', null);
+    let projectName = stripeConfig.get<string | null>('projectName', null);
+    if (projectName !== null) {
+      projectName = projectName.replace(/[\\"'`]/g, '');
+    }
+    console.log({projectName});
 
     const projectNameFlag = projectName ? ['--project-name', projectName] : [];