Separate args from command in cql script (github#36516)

hectorsector · web-flow · commit c2de90f65fa7 · 2023-04-21T17:04:16.000Z
diff --git a/src/codeql-cli/scripts/sync.js b/src/codeql-cli/scripts/sync.js
@@ -4,7 +4,7 @@ import { readFile, writeFile, copyFile } from 'fs/promises'
 import { existsSync } from 'fs'
 import walk from 'walk-sync'
 import { mkdirp } from 'mkdirp'
-import { execSync } from 'child_process'
+import { execFileSync, execSync } from 'child_process'
 import path from 'path'
 import matter from 'gray-matter'
 import { rimraf } from 'rimraf'
@@ -92,6 +92,6 @@ async function rstToMarkdown(sourceDirectory) {
       throw new Error(errorMsg)
     }
 
-    execSync(`pandoc ${tempFilePath} -f rst -t commonmark_x -o ${outputFilepath}`)
+    execFileSync('pandoc', [tempFilePath, '-f', 'rst', '-t', 'commonmark_x', '-o', outputFilepath])
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -4,7 +4,7 @@ import { readFile, writeFile, copyFile } from 'fs/promises'`
`4`	`4`	`import { existsSync } from 'fs'`
`5`	`5`	`import walk from 'walk-sync'`
`6`	`6`	`import { mkdirp } from 'mkdirp'`
`7`		`-import { execSync } from 'child_process'`
	`7`	`+import { execFileSync, execSync } from 'child_process'`
`8`	`8`	`import path from 'path'`
`9`	`9`	`import matter from 'gray-matter'`
`10`	`10`	`import { rimraf } from 'rimraf'`
`@@ -92,6 +92,6 @@ async function rstToMarkdown(sourceDirectory) {`
`92`	`92`	`throw new Error(errorMsg)`
`93`	`93`	`}`
`94`	`94`
`95`		- execSync(`pandoc ${tempFilePath} -f rst -t commonmark_x -o ${outputFilepath}`)
	`95`	`+ execFileSync('pandoc', [tempFilePath, '-f', 'rst', '-t', 'commonmark_x', '-o', outputFilepath])`
`96`	`96`	`}`
`97`	`97`	`}`