SECURITY: Sanitize shell command args

Add validation and sanitization to several code paths.


Bug: 60339
Change-Id: Id124281d21ec730a2e0bbace843dd97194a712b4
Merge remote-tracking branch 'gerrit/REL1_22' into fundraising/REL1_22

* gerrit/REL1_22:
  SECURITY: Sanitize shell command args

Change-Id: If0809141a5023129fd1b46263be3c7848a62fd8f