...
- Leading dashesâ”Leading dashes can cause problems when programs are called with the file name as a parameter because the first character or characters of the file name might be interpreted as an option switch.
- Control characters, such as newlines, carriage returns, and escapeâ”Control characters in a file name can cause unexpected results from shell scripts and in logging.
- Spacesâ”Spaces can cause problems with scripts and when double quotes aren't used to surround the file name.
- Invalid character encodings â” Character encodings can be a huge issue. (See guideline MSC10IDS03-CJ. Character Encoding - UTF8 Related IssuesSanitize non-character code points before performing other sanitization.)
- Any characters other than letters, numbers, and punctuation designated here as portable â” Other special characters are included in this recommendation because they are commonly used as separators and having them in a file name can cause unexpected and potentially insecure behavior.
...