webui: quote superkey in all shell call

#1

Author: KOWX712

webui/index.js

@@ -49,7 +49,7 @@ function updateSuperkey(key) {
     exec(`
         key="${key}"
         if [ -n "$key" ]; then
-            echo "$key" | base64 -w0 > /data/adb/kp-next/key
+            echo '${key}' | base64 -w0 > /data/adb/kp-next/key
             if [ -f "${modDir}/unresolved" ]; then
                 rm -f "${modDir}/unresolved"
                 busybox nohup sh "${modDir}/service.sh" &

webui/page/exclude.js

@@ -217,7 +217,7 @@ async function renderAppList() {
                     saveTimeout = setTimeout(() => {
                         saveExcludedList(excludedApps);
                     }, 500);
-                    exec(`kpatch ${superkey} exclude_set ${realUid} ${isSelected ? 1 : 0}`, { env: { PATH: `${modDir}/bin` } });
+                    exec(`kpatch '${superkey}' exclude_set ${realUid} ${isSelected ? 1 : 0}`, { env: { PATH: `${modDir}/bin` } });
                 });
 
                 appItemMap.set(appKey, item);

webui/page/kpm.js

@@ -46,13 +46,13 @@ async function getKpmList() {
     }
 
     const listResult = await exec(
-        `kpatch ${superkey} kpm list && sh "${modDir}/status.sh" "${superkey}"`,
+        `kpatch '${superkey}' kpm list && sh "${modDir}/status.sh" '${superkey}'`,
         { env: { PATH: `${modDir}/bin:$PATH` } }
     );
     const modules = listResult.stdout.trim().split('\n').filter(line => line.trim());
 
     const modulePromises = modules.map(async (moduleName) => {
-        const infoResult = await exec(`kpatch ${superkey} kpm info "${moduleName}"`, { env: { PATH: `${modDir}/bin` } });
+        const infoResult = await exec(`kpatch '${superkey}' kpm info "${moduleName}"`, { env: { PATH: `${modDir}/bin` } });
         const infoLines = infoResult.stdout.trim().split('\n');
 
         const moduleInfo = {};
@@ -69,7 +69,7 @@ async function getKpmList() {
 }
 
 async function controlModule(moduleName, action) {
-    const result = await exec(`kpatch ${superkey} kpm ctl0 "${moduleName}" ${action}`, { env: { PATH: `${modDir}/bin` } });
+    const result = await exec(`kpatch '${superkey}' kpm ctl0 "${moduleName}" ${action}`, { env: { PATH: `${modDir}/bin` } });
     toast(result.errno === 0 ? result.stdout : result.stderr);
 }
 
@@ -79,12 +79,12 @@ function forgetModule(moduleName) {
 
 async function unloadModule(moduleName) {
     forgetModule(moduleName);
-    const result = await exec(`kpatch ${superkey} kpm unload "${moduleName}"`, { env: { PATH: `${modDir}/bin` } });
+    const result = await exec(`kpatch '${superkey}' kpm unload "${moduleName}"`, { env: { PATH: `${modDir}/bin` } });
     return result.errno === 0;
 }
 
 async function loadModule(modulePath) {
-    const result = await exec(`kpatch ${superkey} kpm load "${modulePath}"`, { env: { PATH: `${modDir}/bin` } });
+    const result = await exec(`kpatch '${superkey}' kpm load "${modulePath}"`, { env: { PATH: `${modDir}/bin` } });
     return result.errno === 0;
 }
 

webui/page/patch.js

@@ -39,9 +39,9 @@ function parseIni(str) {
 async function getInstalledVersion() {
     if (superkey === '') return null;
     if (import.meta.env.DEV) return uInt2String('c06');
-    const working = await exec(`kpatch ${superkey} hello`, { env: { PATH: `${modDir}/bin` } });
+    const working = await exec(`kpatch '${superkey}' hello`, { env: { PATH: `${modDir}/bin` } });
     if (working.stdout.trim() === '') return null;
-    const version = await exec(`kpatch ${superkey} kpver`, { env: { PATH: `${modDir}/bin` } });
+    const version = await exec(`kpatch '${superkey}' kpver`, { env: { PATH: `${modDir}/bin` } });
     return uInt2String(version.stdout.trim());
 }
 
@@ -337,7 +337,7 @@ function patch(type) {
     if (type === "patch") {
         args.push(
             `${modDir}/boot_patch.sh`,
-            superkeyVal,
+            `'${superkeyVal}'`,
             bootDev,
             'true'
         );