podcast-dl 9.2.0 → 9.2.1

package/bin/async.js

@@ -151,7 +151,7 @@ const download = async (options) => {
   }
 };
 
-let downloadItemsAsync = async ({
+const downloadItemsAsync = async ({
   addMp3MetadataFlag,
   archive,
   archiveUrl,

package/bin/commander.js

@@ -1,10 +1,11 @@
 import { AUDIO_ORDER_TYPES, ITEM_LIST_FORMATS } from "./util.js";
 import { createParseNumber, hasFfmpeg } from "./validate.js";
 import { logErrorAndExit } from "./logger.js";
+import { version } from "./version.js";
 
 export const setupCommander = (commander, argv) => {
   commander
-    .version("9.2.0")
+    .version(version)
     .option("--url <string>", "url to podcast rss feed")
     .option(
       "--out-dir <path>",

package/bin/util.js

@@ -10,6 +10,22 @@ import { getArchiveFilename, getItemFilename } from "./naming.js";
 
 const execWithPromise = util.promisify(exec);
 
+/*
+  Escape arguments for a shell command used with exec.
+  Borrowed from shell-escape: https://github.com/xxorax/node-shell-escape/
+*/
+const escapeArgForShell = (arg) => {
+  let result = arg;
+  if (/[^A-Za-z0-9_/:=-]/.test(result)) {
+    result = "'" + result.replace(/'/g, "'\\''") + "'";
+    result = result
+      .replace(/^(?:'')+/g, "") // unduplicate single-quote at the beginning
+      .replace(/\\'''/g, "\\'"); // remove non-escaped single-quote if there are enclosed between 2 escaped
+  }
+
+  return result;
+};
+
 const getTempPath = (path) => {
   return `${path}.tmp`;
 };
@@ -507,7 +523,7 @@ const runFfmpeg = async ({
     const metadataString = Object.keys(metaKeysToValues)
       .map((key) =>
         metaKeysToValues[key]
-          ? `-metadata ${key}="${metaKeysToValues[key].replace(/"/g, '\\"')}"`
+          ? `-metadata ${key}=${escapeArgForShell(metaKeysToValues[key])}`
           : null
       )
       .filter((segment) => !!segment)

package/bin/version.js

@@ -0,0 +1,2 @@
+// Generated by genversion.
+export const version = "9.2.1";

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "podcast-dl",
-  "version": "9.2.0",
+  "version": "9.2.1",
   "description": "A CLI for downloading podcasts.",
   "type": "module",
   "bin": "./bin/bin.js",
   "scripts": {
     "build": "rimraf ./binaries && rimraf ./dist && node build.cjs",
-    "lint": "eslint ./bin"
+    "lint": "eslint ./bin",
+    "version:generate": "npx genversion --es6 --semi ./bin/version.js"
   },
   "lint-staged": {
     "*.{js,json,md}": [