Re: [PATCH] Add shell-quasiquote.

[Taylan Ulrich Bayırlı/Kammer]

Eli Zaretskii <address@hidden> writes:

>> +;;; Like `shell-quote-argument', but much simpler in implementation.
>> +(defun shqq--quote-string (string)
>> +  (concat "'" (replace-regexp-in-string "'" "'\\\\''" string) "'"))
>
> It might be simpler, but it's wrong, because the result is only
> correct for Posix shells.
>
> Please do use shell-quote-argument instead.

Hmm, I don't really want to take responsibility of my library being used
with shells other than POSIX shells.  (The library could make that
clearer and error on other systems.)

How much can I rely on shell-quote-argument?  Can one fully rely on it
being safe against code injection?

Taylan