# Fix shell escaping in getting current env \(\#53335\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/ac6117a9d8a4bebe083caec9757e9c6d16f28428)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: ac6117a9d8a4bebe083caec9757e9c6d16f28428

Requested commit: ac6117a9d8a4bebe083caec9757e9c6d16f28428

Commit: ac6117a9d8a4bebe083caec9757e9c6d16f28428

Tree: 484ef0e9149eae15a2ba5def8597ded252c6838b

Author: Conrad Irwin

Committer: GitHub

## Message

```
Fix shell escaping in getting current env (#53335)

Credit to Dario Weißer for bringing this to our attention.

Self-Review Checklist:

- [ ] I've reviewed my own diff for quality, security, and reliability
- [ ] Unsafe blocks (if any) have justifying comments
- [ ] The content is consistent with the [UI/UX
checklist](https://github.com/zed-industries/zed/blob/main/CONTRIBUTING.md#uiux-checklist)
- [ ] Tests cover the new/changed behavior
- [ ] Performance impact has been considered and is acceptable

Closes #ISSUE

Release Notes:

- Fixed a bug where a cleverly crafted directory name could lead to
remote code execution
```

## Parents

- [30e7e8b55086a4496bfd863950eaabda2527e3e7](https://git.cafe/gitcafe/zed/commit/30e7e8b55086a4496bfd863950eaabda2527e3e7?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/ac6117a9d8a4bebe083caec9757e9c6d16f28428?format=markdown)