From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=DKIM_ADSP_CUSTOM_MED, FREEMAIL_FROM,MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Received: (qmail 15766 invoked from network); 16 Apr 2020 17:45:11 -0000 Received-SPF: pass (primenet.com.au: domain of zsh.org designates 203.24.36.2 as permitted sender) receiver=inbox.vuxu.org; client-ip=203.24.36.2 envelope-from= Received: from ns1.primenet.com.au (HELO primenet.com.au) (203.24.36.2) by inbox.vuxu.org with UTF8ESMTPZ; 16 Apr 2020 17:45:11 -0000 Received: (qmail 12566 invoked by alias); 16 Apr 2020 17:45:05 -0000 Mailing-List: contact zsh-users-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Users List List-Post: List-Help: List-Unsubscribe: X-Seq: 24784 Received: (qmail 26981 invoked by uid 1010); 16 Apr 2020 17:45:05 -0000 X-Qmail-Scanner-Diagnostics: from mail-io1-f53.google.com by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.102.2/25779. spamassassin: 3.4.4. Clear:RC:0(209.85.166.53):SA:0(-2.8/5.0):. Processed in 2.04665 secs); 16 Apr 2020 17:45:05 -0000 X-Envelope-From: pierpaolog@gmail.com X-Qmail-Scanner-Mime-Attachments: | X-Qmail-Scanner-Zip-Files: | Received-SPF: pass (ns1.primenet.com.au: SPF record at _netblocks.google.com designates 209.85.166.53 as permitted sender) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=lywfvurBx2URwlgYULn+vDJeyI816bJzVKOUyp8mOj0=; b=VeBIx1dvFWuyqijxPzipOwGGKqkKcfNz/N/1OkE2SJkJzFSSmM5qLEYnA8V+MyuGsN FhpWfiLq1t6C6uwgggvpCxD+TL6v7LhWLiB5AT/d3/RoxiQTjMqt5YSqV729wKhMELgf vcQjBHv/JLdao7QEQW8Is3NFRXexQOytKNBaYmn9+drsPEKaOKRMRn8B2q/a5j05FaVp /lRV8xcph0d4Us4TaeU3JxAYPTx4bsvX76q1wUtindFbEI7kfhGysFRlEM76uuOCRrEB 4iqOimUKjwtx057EzSPje3DYGubNt+VjBOKaZPkwVJHAjOQQZUgkIeC0W70iafa6emfF 8yFA== X-Gm-Message-State: AGi0PuYHLoQL4HQxCHeAXvqWMJMyLxELWNOSuUNegIzJ9terUflbwRGR VAt64EUA5vcv1C9fU+nAuc/AQUcGKXwT4rl7vVYShFJ7LQQ= X-Google-Smtp-Source: APiQypICxkV53evNE2Sz4hjFOSMq7t/l/BWbqcRJnvpDIccNM4YpdfG3n1ay+x/idVBKmfi/65v8yiMgDtFToR93cg4= X-Received: by 2002:a02:7b21:: with SMTP id q33mr31168979jac.24.1587059070497; Thu, 16 Apr 2020 10:44:30 -0700 (PDT) MIME-Version: 1.0 References: <20200416163022.vremvngrnnbxgdg6@chazelas.org> In-Reply-To: From: Pier Paolo Grassi Date: Thu, 16 Apr 2020 19:43:53 +0200 Message-ID: Subject: Re: indirect assignment to array To: Bart Schaefer Cc: Zsh-Users List Content-Type: multipart/alternative; boundary="000000000000227eff05a36bfcb4" --000000000000227eff05a36bfcb4 Content-Type: text/plain; charset="UTF-8" my personal sanitization test is: [[ ! $var =~ '^[a-zA-Z_][a-zA-Z_0-9]*$' ]] && { error "msg", return 1} Pier Paolo Grassi linkedin: https://www.linkedin.com/in/pier-paolo-grassi-19300217 founder: https://www.meetup.com/it-IT/Machine-Learning-TO Il giorno gio 16 apr 2020 alle ore 19:39 Bart Schaefer < schaefer@brasslantern.com> ha scritto: > "Sanitizing" a varname for (P) expansion is context-dependent. For > example, this is "legal": > > varname='x[$(echo 3)]' > : ${(AP)varname::=foo} > > The point being, there's no straightforward internal test that zsh > could apply to ${(P)varname} that would correctly reject "unsanitary" > references. I suppose we could do something similar to Perl's taint > checks and prevent (P) from being used on environment variables that > have not been (re)assigned since the current shell started up. > --000000000000227eff05a36bfcb4--