The cult of using wordexp(3) to expand filenames specifications in configuration files should be banned from earth imho.
wordexp(3) allows to execute arbitrary shell commands with backticks. So using wordexp() requires to trust the input, which is non-trivial in many cases.
glob(3) is often s much safer replacement. The only drawback is that it doesn't expand environment variables, but this has its own share of issues...
wordexp(3) allows to execute arbitrary shell commands with backticks. So using wordexp() requires to trust the input, which is non-trivial in many cases.
glob(3) is often s much safer replacement. The only drawback is that it doesn't expand environment variables, but this has its own share of issues...


