Double-quote character from CSV is not de-duplicated
The script downloads a CSV from InriaForge, and in CSV, the double-quote character is used to delimit strings, thus is duplicated inside a string. But the script forgets to de-duplicate it in the output.
Example: https://gforge.inria.fr/tracker/?func=detail&group_id=2065&atid=7442&aid=21648 containing the line
The cado-nfs-client.py script is "buggy" under the following condition:
in the description. In the CSV file, one gets:
"The cado-nfs-client.py script is ""buggy"" under the following condition:
followed by the other lines. One can see that the double-quote character has been doubled. And the converted cado-nfs/cado-nfs#21648 (closed) contains:
The cado-nfs-client.py script is ""buggy"" under the following condition:
where each double-quote character is still doubled, which is incorrect here.
Note: This can be a serious issue, as posted programs will probably be buggy. In a shell script, this may remain unnoticed and introduce a security bug because quote protection would be removed. For instance, see the difference between
echo "*"
and
echo ""*""