Perl:quotemeta只用于正则表达式吗?文件名安全吗?

回答时 this 关于用空格(以及可能的其他字符)安全转义文件名的问题, one of the answers 据说使用Perl的内置 quotemeta

quotemeta的文件规定:

quotemeta (and \Q ... \E ) are useful when interpolating strings 
into regular expressions, because by default an interpolated variable 
will be considered a mini-regular expression.  

/[A-Za-z_0-9]/ 用一个 \

在对思南nr的评论中 answer

空壳逸出 是 regexp正在逃跑,尽管我不能 提出一种情况 quotemeta会给你一个真正不安全的 如果你必须逃跑,而不是 绕过外壳,我建议试试 String::ShellQuote,它需要更多的 引用来诋毁一切除了 2009年8月13日14:25

使用quotemeta代替像这样更保守的文件引用是安全的吗 String::Shellquote ? quotemeta utf8或多字节字符安全吗?

\n ,或 \r \

Ã 可以编码为一个字符(UTF8 C3 A0)或两个字符(U+0061) a \不 或 \右 nasty_names 测试。

ShellQuote 在创建文件时,除了以NUL结尾的文件名之外,其他文件名都能正常工作。我从来没有失败过。

(多亏了乙醚,我添加了IPC::System::Simple)

测试文件:

use strict; use warnings; use autodie;
use String::ShellQuote;
use File::Find;
use File::Path;
use IPC::System::Simple 'capturex';

my @nasty_names;
my $top_dir = '/Users/andrew/bin/pipetestdir/testdir';
my $sub_dir = "easy_to_remove_me";
my (@qfail, @sfail, @ipcfail);

sub wanted { 
    if ($File::Find::name) { 
         my $rtr;
         my $exec1="ls ".quotemeta($File::Find::name);
         my $exec2="ls ".shell_quote($File::Find::name);
         my @exec3= ("ls", $File::Find::name);

         $rtr=`$exec1`;  
         push @qfail, "$exec1" 
              if $rtr=~/^\s*$/ ;

         $rtr=`$exec2`;
         push @sfail, "$exec2" 
              if $rtr=~/^\s*$/ ;

         $rtr = capturex(@exec3);
         push @ipcfail, \@exec3
              if $rtr=~/^\s*$/ ;     
    }
}

chdir($top_dir) or die "$!";
mkdir "$top_dir/$sub_dir";
chdir "$top_dir/$sub_dir";

push @nasty_names, "name with new line \n in the middle";
push @nasty_names, "name with CR \r in the middle";
push @nasty_names, "name with tab\tright there";
push @nasty_names, "utf \x{0061}\x{0300} combining diacritic";
push @nasty_names, "utf e̋ alt combining diacritic";
push @nasty_names, "utf e\x{cc8b} alt combining diacritic";
push @nasty_names, "utf άέᾄ greek";
push @nasty_names, 'back\slashes\\Not\\\at\\\\end';
push @nasty_names, qw|back\slashes\\IS\\\at\\\\end\\\\|;

sub create_nasty_files {
    for my $name (@nasty_names) {
       open my $fh, '>', $name ; 
       close $fh;
    }
}

for my $dir (@nasty_names) {
    chdir("$top_dir/$sub_dir");
    mkpath($dir);
    chdir $dir;
    create_nasty_files();
}

find(\&wanted, $top_dir);

print "\nquotemeta failed on:\n", join "\n", @qfail;
print "\nShell Quote failed on:\n", join "\n", @sfail;
print "\ncapturex failed on:\n", join "\n", @ipcfail;
print "\n\n\n",
      "Remove \"$top_dir/$sub_dir\" before running again...\n\n";