Hi Ken,

> > Ken, by "sanitizing", do you mean not using the filenames that
> > mhstore considers insecure?  Or, the basename that Jón wants?  I
> > thought it was the latter, in which case I agree that it should be
> > handled by the user.
>
> I thought Jón wanted both.  I'm kinda torn on the first item; if
> someone writes the code to output that, I won't complain.

Can the filename include a linefeed?  If not, then just producing that
and having the user determine what to do gets my vote.  If str is set to
these parameters then new %(escape) and %(hexstr) functions could set
str to foo\nbar and 666f6f0a626172 prior to using a print function.
:-)

Cheers, Ralph.

_______________________________________________
Nmh-workers mailing list
[email protected]
https://lists.nongnu.org/mailman/listinfo/nmh-workers

Reply via email to