Escape braces after all in cmd/brace encoder

Previously escaped only commas.
rapid7 · May 26, 2023 · f5bec51 · f5bec51
1 parent d825515
commit f5bec51
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/encoders/cmd/brace.rb b/modules/encoders/cmd/brace.rb
@@ -27,7 +27,7 @@ def encode_block(state, buf)
     return buf if state.badchars !~ /\s/
 
     # Perform brace expansion encoding
-    "{#{buf.gsub(',', '\\,').gsub(/\s+/, ',')}}"
+    "{#{buf.gsub(/([{,}])/, '\\\\\1').gsub(/\s+/, ',')}}"
   end
 
 end