Re: [PATCH] Add shell-quasiquote.

[Dmitry Gutov <dgutov@yandex.ru>]

On 10/20/2015 07:41 PM, Taylan Ulrich Bayırlı/Kammer wrote:

> I'm afraid it's effectively the same thing as using shell-quote-argument
> directly in my code.  It puts the responsibility on me, because if
> shell-quote-argument breaks and I don't react fast enough to change
> shqq--quote-string, it's my fault for having used a definition of
> shqq--quote-string that was prone to breakage.

So it would be okay if shell-quote-argument breaks and thus makes major 
functionality in Emacs vulnerable, but your tiny function in its small 
package is safe and sound? That's a nice set of priorities.

Regarding responsibility, I repeat: contributing package to ELPA means 
that that the developers here share some of it.

And your function, speaking in security terms, adds to the attack 
surface, not subtracts from it.