From 4ddd86c8811b360633f24efe667468259d4028ce Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Tue, 22 Sep 2026 13:31:22 +0000
Subject: [PATCH] fix:
 javascript.lang.security.detect-child-process.detect-child-process security
 vulnerability

Automated security fix generated by OrbisAI Security
---
 scripts/sync_icons.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/sync_icons.js b/scripts/sync_icons.js
index 4fa6b538f..1c3816b0c 100644
--- a/scripts/sync_icons.js
+++ b/scripts/sync_icons.js
@@ -12,7 +12,7 @@
 const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
-const { execSync } = require('child_process');
+const { execFileSync } = require('child_process');
 const { Storage } = require('@google-cloud/storage');
 
 const ICONS_DIR = './src/images/icons';
@@ -59,7 +59,7 @@ async function getGcsHash(gcsPath) {
  */
 function convertSvgToPng(svgPath) {
   const tmpPng = svgPath.replace(/\.svg$/i, `._tmp_${process.pid}.png`);
-  execSync(`rsvg-convert "${svgPath}" -o "${tmpPng}" -w 128 -h 128`, {
+  execFileSync('rsvg-convert', [svgPath, '-o', tmpPng, '-w', '128', '-h', '128'], {
     stdio: 'inherit'
   });
   return tmpPng;