[Discuss] Bourne Shell variable assignment question

[Chuck Anderson]

On Thu, Dec 15, 2011 at 05:16:32PM -0500, Jerry Feldman wrote:
> Thanks guys.
> I have several workable solutions for him. The underlying issue is that
> he wants to prevent malicious code.  In the context he is working on, I
> don't think that is a risk, but using egrep to reject any lines that are
> not in the form 'var=value'. I also think that his script must be
> Bourne, not BASH.

I believe eval is susceptible to the same risks as source.