update utp tests

Author: StephenHodgson

.github/actions/run-unity-test-batch/action.yml

@@ -9,7 +9,8 @@ inputs:
     required: true
   build-args:
     description: Additional build args.
-    required: true
+    required: false
+    default: ""
   artifact-name:
     description: Artifact name for uploaded UTP logs (must be unique per matrix job).
     required: false

.github/actions/scripts/run-utp-tests.sh

@@ -6,6 +6,17 @@ BUILD_TARGET=${BUILD_TARGET:?BUILD_TARGET is required}
 BUILD_ARGS=${BUILD_ARGS:-}
 TESTS_INPUT=${TESTS_INPUT:-}
 
+if printf '%s' "$BUILD_ARGS" | grep -qE '[;&`|]'; then
+  echo "::error::BUILD_ARGS contains disallowed shell metacharacters"
+  exit 1
+fi
+
+build_args=()
+if [ -n "$BUILD_ARGS" ]; then
+  # Split on whitespace into an array without invoking the shell
+  read -r -a build_args <<< "$BUILD_ARGS"
+fi
+
 IFS=',' read -ra tests <<< "$TESTS_INPUT"
 failures=0
 
@@ -86,7 +97,7 @@ for raw_test in "${tests[@]}"; do
   build_rc=0
 
   unity-cli run --log-name "${test_name}-Validate" -quit -executeMethod Utilities.Editor.BuildPipeline.UnityPlayerBuildTools.ValidateProject -importTMProEssentialsAsset || validate_rc=$?
-  unity-cli run --log-name "${test_name}-Build" -buildTarget "$BUILD_TARGET" -quit -executeMethod Utilities.Editor.BuildPipeline.UnityPlayerBuildTools.StartCommandLineBuild -sceneList Assets/Scenes/SampleScene.unity $BUILD_ARGS || build_rc=$?
+  unity-cli run --log-name "${test_name}-Build" -buildTarget "$BUILD_TARGET" -quit -executeMethod Utilities.Editor.BuildPipeline.UnityPlayerBuildTools.StartCommandLineBuild -sceneList Assets/Scenes/SampleScene.unity "${build_args[@]}" || build_rc=$?
 
   expected=${expected_status[$test_name]:-0}
   exp_msg=${expected_message[$test_name]:-}