fix: Escape id argument in resolveDeno

denoland · Dec 11, 2024 · c1a7aee · c1a7aee
1 parent 9f6c6fe
commit c1a7aee
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/src/resolver.ts b/src/resolver.ts
@@ -1,4 +1,4 @@
-import { exec } from "node:child_process";
+import { execFile } from "node:child_process";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
 import { execAsync } from "./utils.js";
@@ -78,11 +78,11 @@ export async function resolveDeno(
   // cache directory. The `deno info` command reveals that information
   // though, so we can use that.
   const output = await new Promise<string | null>((resolve) => {
-    exec(`${DENO_BINARY} info --json ${id}`, { cwd }, (error, stdout) => {
-      if (error) resolve(null);
-      else resolve(stdout);
-    });
+  execFile(DENO_BINARY, ['info', '--json', id], { cwd }, (error, stdout) => {
+    if (error) resolve(null);
+    else resolve(stdout);
   });
+});
 
   if (output === null) return null;