[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Shell-escape a string
From: |
dsmich |
Subject: |
Re: Shell-escape a string |
Date: |
Fri, 6 Mar 2015 18:13:08 -0500 |
---- "Mark A. Hershberger" <address@hidden> wrote:
>
> Is there a piece of standard code or a library that I can use to escape
> a string so it is safe to pass to bash?
>
> Specifically, I have submitted this bit[1] to add deletion of duplicate
> messages to a guile script included with mu (maildir utils) and now
> we're looking at how to escape the file names to keep this maliciously
> inserted maildir files from causing problems.
>
> Any hints?
How about using system* instead and pass your arguments directly instead
of letting a shell (mis)interpret them?
-Dale
Re: Shell-escape a string, Taylan Ulrich Bayırlı/Kammer, 2015/03/07