fix(_expand): avoid pathname expansions in eval arguments

Author: akinomyoga

bash_completion

@@ -1209,7 +1209,7 @@ _expand()
             ;;
         ~*)
             _tilde "$cur" ||
-                eval COMPREPLY[0]="$(printf ~%q "${COMPREPLY[0]#\~}")"
+                eval "COMPREPLY[0]=$(printf ~%q "${COMPREPLY[0]#\~}")"
             return ${#COMPREPLY[@]}
             ;;
     esac