dotemacs/tests/test-dwim-shell-config-input-safety.el, branch load-graph-classify-end My Emacs configuration https://git.cjennings.net/dotemacs/atom?h=load-graph-classify-end 2026-05-24T00:21:31+00:00 fix(dwim-shell): quote and validate user-controlled shell inputs 2026-05-24T00:21:31+00:00 Craig Jennings c@cjennings.net 2026-05-24T00:21:31+00:00 urn:sha1:64f349326454583a375a4f8d6df44966833e3512 Several dwim-shell commands interpolated user-controlled strings straight into shell templates, so a value with spaces, quotes, or shell metacharacters could break out of the command. The worst was git-clone-clipboard-url, which dropped raw clipboard contents into "git clone <<cb>>". I added three pure validators (git URL, ffmpeg timestamp, rename prefix) and fixed the interpolation sites. git-clone now validates the clipboard and passes the URL through shell-quote-argument instead of <<cb>>. The GPG recipient and the 7z archive name go through shell-quote-argument instead of hand-written single quotes. The thumbnail timestamp and the rename prefix are validated to a safe shape before they reach the command, so the unquoted interpolation that remains is constrained to digits, colons, and filename-safe characters. The fifth case in the ticket, the video-concat filelist built with echo/tr/sed, is a redesign rather than a quoting fix and is filed as a follow-up.