> On Aug 10, 2023, at 11:11 AM, Austin Group Bug Tracker via austin-group-l at 
> The Open Group <[email protected]> wrote:
> 
> User Reference:            
> https://www.mail-archive.com/[email protected]/msg01176.html 
> Section:                    Pathname Expansion 
> Page Number:                2384 
> Line Number:                76271 
> Interp Status:              --- 
> Final Accepted Text:        https://austingroupbugs.net/view.php?id=1228#c5889

I'm all for this change, in fact, requiring systems to *not* include . and .. 
as glob results (someday) would be great.

However, could this be misinterpreted as allowing a tool to respond to 
"./*.pdf" as *removing* the "./" when returning a match? That would be a 
disaster, because prepending "./" is a widely-recommended way to avoid security 
problems from globs (e.g., to counter filenames that start with "-"). Here's an 
example, I would recommend using "./*.pdf" and never "*.pdf". Some programs 
support "--" but not all do (correctly); prepending "./" is universally 
supported.

--- David A. Wheeler


  • [1003.1(2016... Austin Group Bug Tracker via austin-group-l at The Open Group
    • [1003.1... Austin Group Bug Tracker via austin-group-l at The Open Group
    • [1003.1... Austin Group Bug Tracker via austin-group-l at The Open Group
    • [1003.1... Austin Group Bug Tracker via austin-group-l at The Open Group
    • [1003.1... Austin Group Bug Tracker via austin-group-l at The Open Group
      • Re:... David A. Wheeler via austin-group-l at The Open Group
        • ... Geoff Clare via austin-group-l at The Open Group

Reply via email to