Closed
Description
Please see symfony/symfony#27540 for the background of this issue.
The Process component states that it handles the escaping based on operating system, however if the string form of the command is used, no escaping is performed. Escaping is only performed on the array form of the command.