Hook executes backticks when using quotes in shell params about backrest HOT 4 CLOSED

It works when not using quotes:
Script:
mail.sh -s "Backrest" -m {{ .ShellEscape .Summary }}

But that is not the usual way to use parameters, but ok as long as ".ShellEscape" works reliably...

from backrest.

Hey, .ShellEscape is actually adding single quotes around the value for you in addition to escaping the contents, this should be the expected behavior. I think the addition of the double quotes was causing variable substitution / subcommands / etc to evaluate.

from backrest.

Hi

Simply adding ' around is really not enough.
The output of .Summary etc. must be parsed and every ' in it must have a backslash in front. That must be done by backrest because there is no way to securely paste strings with '"` etc. as parameter.

Greetings

from backrest.

More specifically it's using https://pkg.go.dev/github.com/alessio/shellescape , one of the effects is the single quoting but it's expected to escape symbols, other quotes, etc. I think the problem was the double quotes around the shell escaped expression .

from backrest.