From c862b2816ca5ee7928f2561040b80e193c1fa3ed Mon Sep 17 00:00:00 2001
From: MayaTheShy <MayaTheShy@gmail.com>
Date: Fri, 20 Feb 2026 02:47:41 -0500
Subject: [PATCH] style: Escape quotes and backslashes in turtle rename method
 for safe Lua string interpolation

---
 server/Turtle.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/server/Turtle.js b/server/Turtle.js
index eaa90f1..ed352d3 100644
--- a/server/Turtle.js
+++ b/server/Turtle.js
@@ -720,7 +720,9 @@ export class Turtle extends EventEmitter {
    * Rename the turtle (set computer label)
    */
   async rename(name) {
-    await this.exec(`os.setComputerLabel("${name}")`);
+    // Escape quotes and backslashes for safe Lua string interpolation
+    const safeName = name.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+    await this.exec(`os.setComputerLabel("${safeName}")`);
     this._label = name;
     this._emitUpdate();
   }