Andreas Fischer

... overlooked the unit tests, sorry. Having a look at the tests: If e-mail address strings are indeed forwarded to the shell literally, then the dollar (`$`) and backtick (``...

From an external viewpoint, I totally agree with @silverwind. Meanwhile, as a stopgap solution, the sendmail problem can be remediated by checking only for a leading hyphen character. Regarding my...

> So regarding these changes, they seem okay. But there are various characters that have special meanings in shell context. Can it be demonstrated that this is safe to use...

I can confirm this bug. For me, the problematic character is the dot in the number `0.0` in the following snippet: `{"m.favourite": {"order": 0.0}}` My locale is: `LANG=de_DE.UTF-8 (...) LC_NUMERIC="de_DE.UTF-8"...

@erdnaxeli already pointed out the relevant section of the lua-cjson documentation, which further says that: > Lua CJSON should be reinitialised via cjson.new if the locale of the current process...