Surround poorly-constructed shell substitution variables like $foo with shell tokenizers: "${foo}", including the double quotes.