Encode a String to be used as shell argument

问题

I need to use a name of file as an argument in linux shell command. The problem is, java gives me that name as it is, saving all that spaces and other characters, and thus shell complains. Is there a method to escape all those problematic characters before passing the string to shell?

回答1:

You should be able to put single quotes around the argument and avoid escaping it altogether. Will that work for you?

Old: myapp -f /bad/path/to/file

New: myapp -f '/good/path/to/file'

回答2:

Had the same problem, single quotes wasn't sufficient (as already pointed out by Robert)

Solution:

import com.google.common.escape.Escaper;
import com.google.common.escape.Escapers;

public class YourFancyClass {
    public static final Escaper SHELL_ESCAPE;
    static {
        final Escapers.Builder builder = Escapers.builder();
        builder.addEscape('\'', "'\"'\"'");
        SHELL_ESCAPE = builder.build();
    }
}

Why such an awfully complex replacement? That's why.

Use case:

System.out.format("ln -f '%s' '%s'%n", 
    SHELL_ESCAPE.escape(anyOrig.toString()),
    SHELL_ESCAPE.escape(duplicate.toString()));

Works as intended:

ln -f '/home/user/Musik/mix-2012-13/aesthesys~ I Am Free, That Is Why I'"'"'m Lost..mp3' '/home/user/Musik/youtube converted/aesthesys~ I Am Free, That Is Why I'"'"'m Lost..mp3'

回答3:

How about using the Exec module from Apache Commons? It includes a commandline builder. Also be aware that if the filename is retrieved from user input, you should be very careful with executing commands with the user input as a program argument. Escaping improperly may lead to execution of additional commands (unless the commons module is used I guess).

回答4:

Adding quotes single or double around the file name is often sufficient, depending on the characters you have in the name it may not.

来源：https://stackoverflow.com/questions/5187242/encode-a-string-to-be-used-as-shell-argument

标签

java

shell

escaping