Hacker News Reader

What happens if zDir contains single quotes?

You need to escape them, like in every other instance where strings may contain control characters.

That'd be my guess, at least, but, i guess, single quotes aren't valid characters for zDir.

So what are the quote parsing rules for libcox, and given an arbitrary string, how do I correctly escape them?

(In the absence of this, and certainly in the absence of official docs/examples that do the right thing, that's a security vulnerability waiting to happen.)

String escaping follows the same rules of C/C++ or you could use the str_escape command to do job for you.

Reply on news.ycombinator.com