ev-application: Quote user-supplied strings in ev_spawn command line

When spawning a new atril instance for cross-document links, the
destination and search parameters from the document were interpolated
directly into the command line without shell quoting. Values containing
spaces or special characters could be split into separate arguments by
the shell parser, potentially being interpreted as unintended flags by
the child process.

Apply shell quoting to page label, named destination, and search string
values before appending them to the command line, consistent with how
other spawn sites in the codebase already handle this.

0 files changed, 0 insertions, 0 deletions