And UNIX allowing - in filenames is a massive security problem[0]. If you go grab a bunch of random scripts off of GitHub many of them won&#x27;t correctly escape filenames, and a specially named file can alter how the script executes.<p>[0] <a href="http:&#x2F;&#x2F;www.net-security.org&#x2F;article.php?id=2061" rel="nofollow">http:&#x2F;&#x2F;www.net-security.org&#x2F;article.php?id=2061</a>