Merge branch 'development'

Author: alerickson

CHANGELOG.md

@@ -1,4 +1,7 @@
 # Changelog
+### 2.2.5
+- Security patch for code injection bug
+
 ### 2.2.4.1
 - Remove catalog file
 

README.md

@@ -5,6 +5,15 @@
 [![PowerShell Gallery - PowerShellGet](https://img.shields.io/badge/PowerShell%20Gallery-PowerShellGet-blue.svg)](https://www.powershellgallery.com/packages/PowerShellGet)
 [![Minimum Supported PowerShell Version](https://img.shields.io/badge/PowerShell-3.0-blue.svg)](https://github.com/PowerShell/PowerShellGet)
 
+Important Note
+==============
+
+This version of the module is currently not in development.
+We are no longer accepting any pull requests to this repository and are not planning any future releases.
+If you have a question, or are seeing an unexpected behavior from PowerShellGet 2.x or below please open an issue in this repository.
+We are tracking the on-going development of the new version of this module in the  [PowerShell/PowerShellGet](https://github.com/powershell/powershellget) repository.
+The [PowerShell/PowerShellGet](https://github.com/powershell/powershellget) repository is also the best place to open any feature requests for this module.
+
 Introduction
 ============
 

src/PowerShellGet/PowerShellGet.psd1

@@ -1,6 +1,6 @@
 @{
     RootModule        = 'PSModule.psm1'
-    ModuleVersion     = '2.2.4.1'
+    ModuleVersion     = '2.2.5'
     GUID              = '1d73a601-4a6c-43c5-ba3f-619b18bbb404'
     Author            = 'Microsoft Corporation'
     CompanyName       = 'Microsoft Corporation'
@@ -55,6 +55,9 @@
             ProjectUri   = 'https://go.microsoft.com/fwlink/?LinkId=828955'
             LicenseUri   = 'https://go.microsoft.com/fwlink/?LinkId=829061'
             ReleaseNotes = @'
+### 2.2.5
+- Security patch for code injection bug
+
 ### 2.2.4.1
 - Remove catalog file
 

src/PowerShellGet/private/functions/Ping-Endpoint.ps1

@@ -77,12 +77,14 @@ function Ping-Endpoint
         $iss.formats.clear()
         $iss.LanguageMode = "FullLanguage"
 
+        $EndPoint = [System.Management.Automation.Language.CodeGeneration]::EscapeSingleQuotedStringContent($EndPoint)
+
         $WebRequestcmd =  @'
             param($Credential, $WebProxy)
 
             try
             {{
-                $request = [System.Net.WebRequest]::Create("{0}")
+                $request = [System.Net.WebRequest]::Create('{0}')
                 $request.Method = 'GET'
                 $request.Timeout = 30000
                 if($Credential)