Description:

In /usr/share/nautilus-python/extensions/open-tilix.py, function `open_terminal_in_file()` executes tilix with string concatenating:

```python
def open_terminal_in_file(filename):
if filename:
call('{0} -w "{1}" &'.format(TERMINAL, filename), shell=True)
else:
call("{0} &".format(TERMINAL), shell=True)
```

However, the parameter "filename" is not properly escaped, thus unexpected things may happen when filename contains `"`.


Additional info:
* package version(s)

- tilix 1.9.5-5
- python-nautilus 4.0-1
- nautilus 43.2-1

* config and/or log files etc.

N/A

* link to upstream bug report, if any

https://github.com/gnunn1/tilix/pull/2114

However, tilix has only very minimal maintenance currently.

Steps to reproduce:

1. Create a folder with name:

"; touch testfile; "

2. Open nautilus, and right-click on this folder, and then click "Open In Tilix"
3. A file named "testfile" is created in current user's home folder.