fix: 安全加固 (closed #2726)

Author: wyyalt

apps/backend/agent/solution_maker.py

@@ -280,8 +280,8 @@ def get_run_cmd_base_params(self) -> typing.List[str]:
             f"-i {shell_quote(self.host.bk_cloud_id)}",
             f"-I {shell_quote(self.host.inner_ip or self.host.inner_ipv6)}",
             # 安装/下载配置
-            f"-T {self.dest_dir}",
-            f"-p {self.agent_config['setup_path']}",
+            f"-T {shell_quote(self.dest_dir)}",
+            f"-p {shell_quote(self.agent_config['setup_path'])}",
             f"-c {shell_quote(self.token)}",
             f"-s {shell_quote(self.pipeline_id)}",
         ]