From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 19482 invoked from network); 2 May 2007 17:12:34 -0000 X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on f.primenet.com.au X-Spam-Level: X-Spam-Status: No, score=-2.5 required=5.0 tests=BAYES_00,FORGED_RCVD_HELO autolearn=ham version=3.1.8 Received: from news.dotsrc.org (HELO a.mx.sunsite.dk) (130.225.247.88) by ns1.primenet.com.au with SMTP; 2 May 2007 17:12:34 -0000 Received-SPF: none (ns1.primenet.com.au: domain at sunsite.dk does not designate permitted sender hosts) Received: (qmail 66406 invoked from network); 2 May 2007 17:12:29 -0000 Received: from sunsite.dk (130.225.247.90) by a.mx.sunsite.dk with SMTP; 2 May 2007 17:12:29 -0000 Received: (qmail 17929 invoked by alias); 2 May 2007 17:12:27 -0000 Mailing-List: contact zsh-workers-help@sunsite.dk; run by ezmlm Precedence: bulk X-No-Archive: yes X-Seq: 23382 Received: (qmail 17918 invoked from network); 2 May 2007 17:12:26 -0000 Received: from news.dotsrc.org (HELO a.mx.sunsite.dk) (130.225.247.88) by sunsite.dk with SMTP; 2 May 2007 17:12:26 -0000 Received: (qmail 66102 invoked from network); 2 May 2007 17:12:26 -0000 Received: from flock1.newmail.ru (82.204.219.207) by a.mx.sunsite.dk with SMTP; 2 May 2007 17:12:22 -0000 Received: (qmail 7669 invoked from network); 2 May 2007 17:12:21 -0000 Received: from unknown (HELO cooker.local) (arvidjaar@newmail.ru@91.76.106.21) by smtpd.newmail.ru with SMTP; 2 May 2007 17:12:21 -0000 From: Andrey Borzenkov To: zsh-workers@sunsite.dk Subject: Re: PATCH: zsh/regex and =~ Date: Wed, 2 May 2007 21:12:15 +0400 User-Agent: KMail/1.9.6 References: <693135.1529.qm@web36808.mail.mud.yahoo.com> <20070502173618.449b99ef.pws@csr.com> In-Reply-To: <20070502173618.449b99ef.pws@csr.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2616703.VUSSogK182"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200705022112.20312.arvidjaar@newmail.ru> --nextPart2616703.VUSSogK182 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Wednesday 02 May 2007, Peter Stephenson wrote: > Daniel Qarras wrote: > > > Only thing missing being support for echo $"Starting foo:" style > > messages (used to localizate the message) but that's not much of a > > problem. > > I don't even know how that works; it doesn't appear to be excessively > well documented. > Also documentation for gettext rather advices against using it and suggests= =20 using explicit gettext & Co. calls instead: The security holes of `$"..."' come from the fact that after looking up the translation of the string, `bash' processes it like it processes any double-quoted string: dollar and backquote processing, like `eval' does. With obvious implications. Of course one possibility could be to make result fully quoted and immune t= o=20 any further processing. OTOH it probably still breaks in nested evals. --nextPart2616703.VUSSogK182 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQBGOMZwR6LMutpd94wRAqQfAKCz7hVnh+dedJXrR3UcH7m0tjszTgCgxVkN FP2wZS7VgSKmz1dQKAa4kvY= =pHVO -----END PGP SIGNATURE----- --nextPart2616703.VUSSogK182--