There are issues with handling files in any language, I think Bash is used in environments where files are controlled inputs too often for this to be an issue.

There are issues with handling files in any language, I think Bash is used in environments where files are controlled inputs too often for this to be an issue. Having Bash bail on bad filenames would be crude but enough for me, hook into readdir and check what subprocesses reads. Not checking filenames is a valid security concern in any language.