Calling shell command from ruby with proper argument escaping

I want to do the following securely

system "echo '#{params[:message]}' > /dev/log"

What is the proper way for escaping arguments when calling a native command?

(Ex开发者_运维技巧ample evil input: '; rm -Rf *; echo 'I won.)

If you do

system "echo", params[:message]

Then the second argument, will be sent as an argument, it will not be executed.