virtualenv: Command injection via --prompt in activate.bat (batch activator)

...