test: Avoid arbitrary Python injection if compiled in a path with quotes

Signed-off-by: Simon McVittie <smcv@collabora.com>

diff --git a/test/meson.build b/test/meson.build
index e1d14fecd9ab1128c828a51beedfe603ffd7503a..e65c5c384944e808a167265d898bd5e3e1dac4ea 100644 (file)
--- a/test/meson.build
+++ b/test/meson.build
@@ -76,7 +76,9 @@ test_env.set('DBUS_TEST_UNINSTALLED', '1')
 
 xdgdir = custom_target('gen-xdgdir',
     command: [
-        python, '-c', 'import os; os.makedirs("@0@", exist_ok=True)'.format(meson.current_build_dir() / 'XDG_RUNTIME_DIR')
+        python, '-c',
+        'import os, sys; os.makedirs(sys.argv[1], exist_ok=True)',
+        meson.current_build_dir() / 'XDG_RUNTIME_DIR',
     ],
     output: 'XDG_RUNTIME_DIR'
 )