diff --git a/frontend/apps/reader/modules/readerdictionary.lua b/frontend/apps/reader/modules/readerdictionary.lua
index 7cffc3318..4d1577d90 100644
--- a/frontend/apps/reader/modules/readerdictionary.lua
+++ b/frontend/apps/reader/modules/readerdictionary.lua
@@ -164,8 +164,9 @@ function ReaderDictionary:stardictLookup(word, box)
             results_str = A.stdout("./sdcv", "--utf8-input", "--utf8-output",
                     "-nj", word, "--data-dir", dict_dir)
         else
-            local std_out = io.popen("./sdcv --utf8-input --utf8-output -nj "
-                .. ("%q"):format(word) .. " --data-dir " .. dict_dir, "r")
+            local std_out = io.popen(
+                ("./sdcv --utf8-input --utf8-output -nj %q --data-dir %q"):format(word, dict_dir),
+                "r")
             if std_out then
                 results_str = std_out:read("*all")
                 std_out:close()
diff --git a/frontend/ui/network/wpa_supplicant.lua b/frontend/ui/network/wpa_supplicant.lua
index 1c7e64308..9df28d33d 100644
--- a/frontend/ui/network/wpa_supplicant.lua
+++ b/frontend/ui/network/wpa_supplicant.lua
@@ -45,7 +45,7 @@ local function calculatePsk(ssid, pwd)
     --   * /wpa_supplicant/wpa_passphrase.c
     --   * /src/crypto/sha1-pbkdf2.c
     -- see: http://docs.ros.org/diamondback/api/wpa_supplicant/html/sha1-pbkdf2_8c_source.html
-    local fp = io.popen(string.format("wpa_passphrase %s %s", ssid, pwd))
+    local fp = io.popen(("wpa_passphrase %q %q"):format(ssid, pwd))
     local out = fp:read("*a")
     fp:close()
     return string.match(out, 'psk=([a-f0-9]+)')