It appears when a program builds a string and hands it to sh -c. The fix is to run the program directly with an argument list and no shell, so the input stays one argument.