security:escape shell cmd