fix: handle special characters in postinstall script

[aloisklink]

Improve handling of shell metacharacters in folder names in the postinstall script by replacing execSync with execFileSync.

For example, spaces in folder names are now allowed:

Current behaviour

Installing msw with a msw.workerDirectory set in your package.json file fails if the folder structure has shell special characters (e.g. spaces) in it.

alois@my-pc:~/Documents/msw with a space (main)$ npm run postinstall

> [email protected] postinstall
> node -e "import('./config/scripts/postinstall.js').catch(() => void 0)"

node:internal/modules/cjs/loader:1215
  throw err;
  ^

Error: Cannot find module '/home/alois/Documents/msw'
    at Module._resolveFilename (node:internal/modules/cjs/loader:1212:15)
    at Module._load (node:internal/modules/cjs/loader:1043:27)
    at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:164:12)
    at node:internal/main/run_main_module:28:49 {
  code: 'MODULE_NOT_FOUND',
  requireStack: []
}

Node.js v20.19.4
[MSW] Failed to automatically update the worker script.

Error: Command failed: node /home/alois/Documents/msw with a space/cli/index.js init
node:internal/modules/cjs/loader:1215
  throw err;
  ^

Error: Cannot find module '/home/alois/Documents/msw'
    at Module._resolveFilename (node:internal/modules/cjs/loader:1212:15)
    at Module._load (node:internal/modules/cjs/loader:1043:27)
    at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:164:12)
    at node:internal/main/run_main_module:28:49 {
  code: 'MODULE_NOT_FOUND',
  requireStack: []
}

Node.js v20.19.4

Proposed

Installing msw with a msw.workerDirectory set in your package.json file works, even if your folder structure has spaces in it.

alois@my-pc:~/Documents/msw with a space (fix/improve-postinstall-script)$ npm run postinstall

> [email protected] postinstall
> node -e "import('./config/scripts/postinstall.js').catch(() => void 0)"

Future work

The config/scripts/patch-ts.js script is still vulnerable to this issue too, but since that only affects developers of this library, not users, I've ignored it for this PR:

msw/config/scripts/patch-ts.js

Lines 91 to 96 in e0a4643

	const tscCompilation = await execAsync(
	`tsc --noEmit --skipLibCheck ${typeDefsPaths.join(' ')}`,
	{
	cwd: BUILD_DIR,
	},
	)