Shell injection protection