Re: tokenize honoring quotes

[Robert E. Griffith]

Boy, eval quoting kind of bends my mind. When I first looked at it I  
thought "that cant be right" but now I see it.  What if I need to avoid 
arbitrary code execution like ..

   str='echo "hello $(ls >/dev/tty) World"'

Is there anything without using eval?  I played around with passing it 
through printf's %q but that renders the whole string escaped so it 
become just one token again.

--BobG

On 8/5/22 14:32, Chet Ramey wrote:
> Some variant of this:
>
> str='echo "hello world"'
>
> declare -a a
> eval a=\( "$str" \)
>
> declare -p a