Re: [PATCH] Add shell-quasiquote.

[Random832]

address@hidden (Taylan Ulrich "Bayırlı/Kammer") writes:

> Dmitry Gutov <address@hidden> writes:
>> If you know of a real problem scenario reproducible with
>> shell-quote-argument, please file a bug. Then we'll fix it.
>
> Not knowing that there are bugs is not proof that there are no bugs.

Why aren't you as sure of its safety, regarding the POSIX section, as you
are of the safety of your implementation?

>> Either way, please avoid reinventing the wheel.
>
> It's not a reinvention because it has very strict semantics with regard
> to safety guarantees, which shell-quote-argument apparently doesn't.

Out of curiosity, how are you guaranteeing that the result will be
executed by a POSIX shell? Passing a string quoted by your function to
MS Windows' cmd.exe (or, to that matter, to csh - even worse than the
existing version) would be an absolute disaster as far as injection
vulnerabilities go.