Fix OS command injection