settings.restart-script in spigot.yml appears to be treated as a script path, on windows it is handled like a shell command line

[gmi]

Expected behavior

settings.restart-script should be treated like a script path, not a shell command line

Observed/Actual behavior

settings.restart-script is treated as a shell command line

Steps/models to reproduce

showcase.mp4

Plugin and Datapack List

None

Paper version

This server is running Paper version 1.21.8-60-main@29c8822 (2025-09-06T21:49:13Z) (Implementing API version 1.21.8-R0.1-SNAPSHOT)
You are running the latest version

Other

No response

[gmi]

This bug is also an issue on 1.21.11

[xt449]

Based on how it fails if the first part (when separated by spaces) of the restart-script value is not a file, this might somehow be intended...?

Probably should update this to the following to avoid the possible vulnerability.

new ProcessBuilder(restartScript).start();