Re: SWISH-E 2.4.4 filters can not locate files

Ludovic Drolez <[email protected]> Mon, 16 Oct 2006 23:33:11 -0700 (PDT)
Newsgroups gmane.comp.web.swish-e
Message-ID <[email protected]>

David L Norris wrote:
> On Mon, 2006-10-16 at 18:35 -0700, Peter Karman wrote:
> 
>>I think we might be over-thinking this. If the original issue that stringQuote() 
>>was trying to address was simply that quotes in filenames cause problems, why 
>>not just escape quotes, rather than trying to escape everything suspicious?

We should escape everything suspicious, because I was able to run a 'rm -rf'
with a file like this "mynicefilename.pdf;rm -rf /". The same applies to & |
, and more...

Cheers,

-- 
Ludovic Drolez.

http://zaurus.palmopensource.com    - The Zaurus Open Source Portal
http://www.drolez.com      - Personal site - Linux and PalmOS stuff