Re: SWISH-E 2.4.4 filters can not locate files
Ludovic Drolez <[email protected]> Mon, 16 Oct 2006 23:33:11 -0700 (PDT)
| Newsgroups | gmane.comp.web.swish-e |
|---|---|
| Message-ID | <[email protected]> |
David L Norris wrote: > On Mon, 2006-10-16 at 18:35 -0700, Peter Karman wrote: > >>I think we might be over-thinking this. If the original issue that stringQuote() >>was trying to address was simply that quotes in filenames cause problems, why >>not just escape quotes, rather than trying to escape everything suspicious? We should escape everything suspicious, because I was able to run a 'rm -rf' with a file like this "mynicefilename.pdf;rm -rf /". The same applies to & | , and more... Cheers, -- Ludovic Drolez. http://zaurus.palmopensource.com - The Zaurus Open Source Portal http://www.drolez.com - Personal site - Linux and PalmOS stuff