update 2026-10-01 07:23:35

luci-app-passwall/luasrc/passwall/api.lua

@@ -399,7 +399,7 @@ function remove(...)
     for i = 1, select("#", ...) do
         local value = select(i, ...)
         if type(value) == "string" and #value > 0 and value ~= "/" then
-            local quoted = util.shellsqescape(value)
+            local quoted = "'" .. value:gsub("'", "'\\''") .. "'"
             sys.call("rm -rf " .. quoted)
         end
     end