Allows use of inline powershell for cmd.script args

salt/modules/cmdmod.py

@@ -344,7 +344,7 @@ def _run(cmd,
         # The last item in the list [-1] is the current method.
         # The third item[2] in each tuple is the name of that method.
         if stack[-2][2] == 'script':
-            cmd = 'Powershell -NonInteractive -NoProfile -ExecutionPolicy Bypass -File ' + cmd
+            cmd = 'Powershell -NonInteractive -NoProfile -ExecutionPolicy Bypass {0}'.format(cmd.replace('"', '\\"'))
         elif encoded_cmd:
             cmd = 'Powershell -NonInteractive -EncodedCommand {0}'.format(cmd)
         else:

tests/integration/files/file/base/issue-56195/test.ps1

@@ -0,0 +1,7 @@
+[CmdLetBinding()]
+Param(
+  [SecureString] $SecureString
+)
+
+$Credential = New-Object System.Net.NetworkCredential("DummyId", $SecureString)
+$Credential.Password

tests/integration/modules/test_cmdmod.py

@@ -491,3 +491,14 @@ def test_windows_env_handling(self):
         out = self.run_function('cmd.run', ['set'], env={"abc": "123", "ABC": "456"}).splitlines()
         self.assertIn('abc=123', out)
         self.assertIn('ABC=456', out)
+
+    @skipIf(not salt.utils.platform.is_windows(), 'minion is not windows')
+    def test_windows_powershell_script_args(self):
+        '''
+        Ensure that powershell processes inline script in args
+        '''
+        val = 'i like cheese'
+        args = '-SecureString (ConvertTo-SecureString -String "{0}" -AsPlainText -Force) -ErrorAction Stop'.format(val)
+        script = 'salt://issue-56195/test.ps1'
+        ret = self.run_function('cmd.script', [script], args=args, shell='powershell')
+        self.assertEqual(ret['stdout'], val)