fix(svgbob): remove quote around value (#2013)

Author: ggrossetie

ci/tests/smoke.js

@@ -24,6 +24,7 @@ const tests = [
   { engine: 'plantuml', file: 'architecture.puml', options: {}, outputFormat: ['svg', 'pdf', 'png', 'txt'] },
   { engine: 'plantuml', file: 'architecture.puml', options: { 'no-metadata': 'true' }, outputFormat: ['svg', 'png'] },
   { engine: 'svgbob', file: 'cloud.bob', options: {}, outputFormat: ['svg'] },
+  { engine: 'svgbob', file: 'cloud.bob', options: {'font-size': '14'}, outputFormat: ['svg'] },
   { engine: 'nomnoml', file: 'pirate.nomnoml', options: {}, outputFormat: ['svg'] },
   { engine: 'packetdiag', file: 'packet.diag', options: {}, outputFormat: ['svg', 'png'] },
   { engine: 'rackdiag', file: 'rack.diag', options: {}, outputFormat: ['svg', 'png'] },

server/src/main/java/io/kroki/server/service/Svgbob.java

@@ -68,14 +68,16 @@ private byte[] svgbob(byte[] source, JsonObject options) throws IOException, Int
     addOption("font-size", options, commands);
     addOption("scale", options, commands);
     addOption("stroke-width", options, commands);
-    return commander.execute(source, commands.toArray(new String[0]));
+    String[] args = commands.toArray(new String[0]);
+    return commander.execute(source, args);
   }
 
   private void addOption(String optionKey, JsonObject options, List<String> commands) {
     String value = options.getString(optionKey);
     if (value != null) {
       String safeValue = value.replaceAll("[-\"$/@*&=;:!\\\\]", "");
-      commands.add("--" + optionKey + "=\"" + safeValue + "\"");
+      // No need to quote safeValue: ProcessBuilder passes arguments directly to the OS without shell interpretation.
+      commands.add("--" + optionKey + "=" + safeValue);
     }
   }
 }