From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.help Subject: Re: Printf and quoting in general, SQL injection in particular [was: Emacs Modular Configuration: the preferable way] Date: Tue, 22 Jun 2021 15:12:42 +0300 Message-ID: <83bl7yumh1.fsf@gnu.org> References: <87pmwgdiyj.fsf@zoho.eu> <83y2b3tq07.fsf@gnu.org> <871r8vcrnm.fsf@posteo.net> <20210621141148.GA29347@tuxteam.de> <20210621211547.GA12274@tuxteam.de> <87pmwevjbs.fsf@zoho.eu> Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="24656"; mail-complaints-to="usenet@ciao.gmane.io" To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Tue Jun 22 14:13:56 2021 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lvfHv-0006A8-Da for geh-help-gnu-emacs@m.gmane-mx.org; Tue, 22 Jun 2021 14:13:55 +0200 Original-Received: from localhost ([::1]:43158 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lvfHu-0008FA-Fw for geh-help-gnu-emacs@m.gmane-mx.org; Tue, 22 Jun 2021 08:13:54 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:55302) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lvfH3-0008EA-53 for help-gnu-emacs@gnu.org; Tue, 22 Jun 2021 08:13:03 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:57594) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lvfH2-00049G-Uo for help-gnu-emacs@gnu.org; Tue, 22 Jun 2021 08:13:00 -0400 Original-Received: from 84.94.185.95.cable.012.net.il ([84.94.185.95]:2114 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lvfH1-0004hn-MR for help-gnu-emacs@gnu.org; Tue, 22 Jun 2021 08:13:00 -0400 In-Reply-To: <87pmwevjbs.fsf@zoho.eu> (message from Emanuel Berg via Users list for the GNU Emacs text editor on Tue, 22 Jun 2021 02:23:03 +0200) X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.io gmane.emacs.help:131189 Archived-At: > Date: Tue, 22 Jun 2021 02:23:03 +0200 > From: Emanuel Berg via Users list for the GNU Emacs text editor > > tomas wrote: > > > My hint was rather a metaphor: using string operations on > > things that aren't really strings (in the original case: > > file system paths) > > Emacs disagrees: > > (setq file "~/.emacs") > (file-exists-p file) ; t > (stringp file) ; t > > > But your side is not "the world", and therefore Eli's > > warning was spot-on > > False alarm, as shown. It is safe to say, that warning can > be ignored. Not a false alarm; ignore that warning at your own peril: (string-equal "~/foo" "/home/users/eliz/foo") => nil (file-equal-p "~/foo" "/home/users/eliz/foo") => t and also: (string-equal "/home/users/eliz/foo" "/server/homes/users/eliz/foo") => nil (file-equal-p "/home/users/eliz/foo" "/server/homes/users/eliz/foo") => t And what about the below, what's going on there? $ ls -l /usr/bin/emacs* -rwxr-xr-x 2 eliz None 81081674 2021-03-25 15:54 /usr/bin/emacs -rwxr-xr-x 2 eliz None 81081674 2021-03-25 15:54 /usr/bin/emacs-27.2 (file-equal-p "/usr/bin/emacs" "/usr/bin/emacs-27.2") => t