| File: ArgumentEscaper.cs | Web Access |
| Project: src\sdk\src\Cli\Microsoft.DotNet.Cli.Utils\Microsoft.DotNet.Cli.Utils.csproj (Microsoft.DotNet.Cli.Utils) |
// Licensed to the .NET Foundation under one or more agreements. // The .NET Foundation licenses this file to you under the MIT license. namespace Microsoft.DotNet.Cli.Utils; public static class ArgumentEscaper { /// <summary> /// Undo the processing which took place to create string[] args in Main, /// so that the next process will receive the same string[] args /// /// See here for more info: /// https://docs.microsoft.com/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way /// </summary> /// <param name="args"></param> /// <returns></returns> public static string EscapeAndConcatenateArgArrayForProcessStart(IEnumerable<string> args) { var escaped = EscapeArgArray(args); #if NET35 return string.Join(" ", escaped.ToArray()); #else return string.Join(" ", escaped); #endif } /// <summary> /// Undo the processing which took place to create string[] args in Main, /// so that the next process will receive the same string[] args /// /// See here for more info: /// https://docs.microsoft.com/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way /// </summary> /// <param name="args"></param> /// <returns></returns> public static string EscapeAndConcatenateArgArrayForCmdProcessStart(IEnumerable<string> args) { var escaped = EscapeArgArrayForCmd(args); #if NET35 return string.Join(" ", escaped.ToArray()); #else return string.Join(" ", escaped); #endif } /// <summary> /// Undo the processing which took place to create string[] args in Main, /// so that the next process will receive the same string[] args /// /// See here for more info: /// https://docs.microsoft.com/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way /// </summary> /// <param name="args"></param> /// <returns></returns> private static IEnumerable<string> EscapeArgArray(IEnumerable<string> args) { var escapedArgs = new List<string>(); foreach (var arg in args) { escapedArgs.Add(EscapeSingleArg(arg)); } return escapedArgs; } /// <summary> /// This prefixes every character with the '^' character to force cmd to /// interpret the argument string literally. An alternative option would /// be to do this only for cmd metacharacters. /// /// See here for more info: /// https://docs.microsoft.com/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way /// </summary> /// <param name="args"></param> /// <returns></returns> private static IEnumerable<string> EscapeArgArrayForCmd(IEnumerable<string> arguments) { var escapedArgs = new List<string>(); foreach (var arg in arguments) { escapedArgs.Add(EscapeArgForCmd(arg)); } return escapedArgs; } public static string EscapeSingleArg(string arg, Func<string, bool>? additionalShouldSurroundWithQuotes = null) { var sb = new StringBuilder(); var length = arg.Length; var needsQuotes = length == 0 || ShouldSurroundWithQuotes(arg) || additionalShouldSurroundWithQuotes?.Invoke(arg) == true; var isQuoted = needsQuotes || IsSurroundedWithQuotes(arg); if (needsQuotes) sb.Append("\""); for (int i = 0; i < length; ++i) { var backslashCount = 0; // Consume All Backslashes while (i < arg.Length && arg[i] == '\\') { backslashCount++; i++; } // Escape any backslashes at the end of the arg // when the argument is also quoted. // This ensures the outside quote is interpreted as // an argument delimiter if (i == arg.Length && isQuoted) { sb.Append('\\', 2 * backslashCount); } // At then end of the arg, which isn't quoted, // just add the backslashes, no need to escape else if (i == arg.Length) { sb.Append('\\', backslashCount); } // Escape any preceding backslashes and the quote else if (arg[i] == '"') { sb.Append('\\', (2 * backslashCount) + 1); sb.Append('"'); } // Output any consumed backslashes and the character else { sb.Append('\\', backslashCount); sb.Append(arg[i]); } } if (needsQuotes) sb.Append("\""); return sb.ToString(); } /// <summary> /// Prepare as single argument to /// roundtrip properly through cmd. /// /// This prefixes every character with the '^' character to force cmd to /// interpret the argument string literally. An alternative option would /// be to do this only for cmd metacharacters. /// /// See here for more info: /// https://docs.microsoft.com/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way /// </summary> /// <param name="args"></param> /// <returns></returns> private static string EscapeArgForCmd(string argument) { var sb = new StringBuilder(); var quoted = ShouldSurroundWithQuotes(argument); if (quoted) sb.Append("^\""); // Prepend every character with ^ // This is harmless when passing through cmd // and ensures cmd metacharacters are not interpreted // as such foreach (var character in argument) { sb.Append("^"); sb.Append(character); } if (quoted) sb.Append("^\""); return sb.ToString(); } internal static bool ShouldSurroundWithQuotes(string argument) => // Only quote if whitespace exists in the string ArgumentContainsWhitespace(argument); internal static bool IsSurroundedWithQuotes(string argument) => argument.StartsWith("\"", StringComparison.Ordinal) && argument.EndsWith("\"", StringComparison.Ordinal); internal static bool ArgumentContainsWhitespace(string argument) => argument.Contains(" ") || argument.Contains("\t") || argument.Contains("\n"); }