diff --git a/app/scripts/resources/scripts/resources/functions/shell_esc.lua b/app/scripts/resources/scripts/resources/functions/shell_esc.lua
new file mode 100644
index 0000000000..8492722d79
--- /dev/null
+++ b/app/scripts/resources/scripts/resources/functions/shell_esc.lua
@@ -0,0 +1,6 @@
+
+--escape shell arguments to prevent command injection
+	local function shell_esc(x)
+		return (x:gsub('\\', '\\\\')
+			:gsub('\'', '\\\''))
+	end