---- "Mark A. Hershberger" <m...@nichework.com> wrote: 
> 
> Is there a piece of standard code or a library that I can use to escape
> a string so it is safe to pass to bash?
> 
> Specifically, I have submitted this bit[1] to add deletion of duplicate
> messages to a guile script included with mu (maildir utils) and now
> we're looking at how to escape the file names to keep this maliciously
> inserted maildir files from causing problems.
> 
> Any hints?

How about using system* instead and pass your arguments directly instead
of letting a shell (mis)interpret them?

-Dale


Reply via email to