diff --git a/scripts/get_id_from_xpi.sh b/scripts/get_id_from_xpi.sh
index 1586a458..3a820712 100755
--- a/scripts/get_id_from_xpi.sh
+++ b/scripts/get_id_from_xpi.sh
@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 temp=$(mktemp -d)
-unzip -qq $1 -d $temp
-jq '.applications.gecko.id' $temp/manifest.json | tr -d '"'
+unzip -qq "$1" -d "$temp"
+jq '.applications.gecko.id' "$temp"/manifest.json | tr -d '"'
diff --git a/scripts/install.sh b/scripts/install.sh
index 535b116d..35595a16 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 installdir=${1:-/usr/lib/firefox/browser/extensions}
 xpi=web-ext-artifacts/$(ls -t web-ext-artifacts/ | head -n1)
-install -Dm644 $xpi $installdir/$(scripts/get_id_from_xpi.sh $xpi).xpi
+install -Dm644 "$xpi" "$installdir"/"$(scripts/get_id_from_xpi.sh "$xpi")".xpi