oss-sec mailing list archives

Re: with firefox on X11, any page can pastejack you anytime


From: Jan Engelhardt <jengelh () inai de>
Date: Thu, 19 Oct 2023 02:42:01 +0200 (CEST)


On Thursday 2023-10-19 00:31, Grant Taylor wrote:

Aside:  The thread in question brought up some interesting idea, including
altering how things that start with unsafe characters -- though I wonder why
not all files -- with `./` so the `-bob` file becomes `./-bob` when expanded.
--  I wondered about prefixing globing with `--` which is the de-facto don't
process anything after this as a command line flag.

Humans have a habit of specifying the most important thing first, not
only in natural language, but also commands. This reflects in
command, e.g. `ls -l *z --color=never`. Forgot something? `!ls
--human-readable`, there, more stuff appended to the end. Nobody
likes to do cursor movement, and nobody likes retyping the command
from the start to meet the POSIX pedantism that requires all options
before the first non-option (operand).

For this reason, POSIXLY_CORRECT=1 is unpopluar, and so would,
unfortunately, be your suggestion to stop option processing at a
wildcard with an implicit "--" (which would become explicit "--" for
the program's argv).

The ./ suggestion has some merit, though this leads to programs
acting differently, e.g. `tar --strip=N` .


Current thread: