fix: Properly pass argument

Signed-off-by: Julius Härtl <[email protected]>
CollaboraOnline · Oct 13, 2023 · 0cceac7 · 0cceac7
1 parent c1f5dbd
commit 0cceac7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/proxy.php b/proxy.php
@@ -82,7 +82,8 @@ function startCoolwsd()
     $remoteFontConfig = "";
     if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
     {
-        $remoteFontConfig = "--o:remote_font_config.url=https://" . $_SERVER['HTTP_HOST'] . preg_replace("/richdocumentscode.*$/", "richdocuments/settings/fonts.json", $_SERVER['REQUEST_URI']);
+        $remoteFontConfigUrl = escapeshellarg("https://" . $_SERVER['HTTP_HOST'] . preg_replace("/richdocumentscode.*$/", "richdocuments/settings/fonts.json", $_SERVER['REQUEST_URI']));
+        $remoteFontConfig = "--o:remote_font_config.url=" . $remoteFontConfigUrl;
     }
 
     // Extract the AppImage if FUSE is not available