Re: Bash not escaping escape sequences in directory names

[Chet Ramey]

On 1/22/22 5:52 AM, Andreas Kusalananda Kähäri wrote:
> On Fri, Jan 21, 2022 at 06:33:02PM -0500, Chet Ramey wrote:
> > On 1/21/22 6:13 PM, Mike Jonkmans wrote:
> > > On Fri, Jan 21, 2022 at 03:29:47PM -0500, Chet Ramey wrote:
> > > > On 1/21/22 1:43 AM, Lawrence Velázquez wrote:
> > > >
> > > > > Personally, I would be
> > > > > less than pleased if my whole terminal turned red just because I
> > > > > changed into a directory that happened to have a weird name.
> > > >
> > > > A mild annoyance at best, don't you think?
> > >
> > > Mostly an annoyance, but it has potential to be a security issue.
> >
> > Highly unlikely. It would require an implausible scenario.
>
> Mind if I use that quote? :-)
>
> Example of interesting values to test in PS1, with discussions:
>
>         https://security.stackexchange.com/q/56307

They're all about security issues in terminal emulators, or cat, not bash.
They don't require bash at all.

I will look at doing something here to improve the situation, but I'll push
back on the notion that this is a security issue with bash.

--
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/