REGEX Filename Validation

[LocoPollo]

Does anyone have a regex line that either removes illegal characters or validates a string so that it can be used as file- and foldernames on linux and windows??

Its probably really simple, but I have spend a day trying to figure it out.

Thanks!

 

[KevinADC]

the convention is to only use certain characters for names:

a-z A-Z _ . -

so a regexp might look like this:

unless ($file =~ m/^[\w.-]+$/) {
    do something
}

\w is a character class for a-zA-Z_

and if you are using taint checking capture the pattern in memory to use to untaint the name:

unless ($file =~ m/^([\w.-]+)$/) {
    die "Illegal file name: $file";
}
my $untainted = $1;