[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Errors indicated by ineffective backslashes in string literals
From: |
Paul Eggert |
Subject: |
Re: Errors indicated by ineffective backslashes in string literals |
Date: |
Mon, 18 Mar 2019 18:56:21 -0700 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1 |
On 3/16/19 12:04 PM, Mattias Engdegård wrote:
> Now I searched for such cases and found lots, and decided to postpone it
> since it's mostly cosmetic -- unless we are concerned about newlines in file
> names, which we perhaps should be.
>
I'm afraid we should be, since newlines in file names are well-known
attack vector
<https://dwheeler.com/essays/fixing-unix-linux-filenames.html>.