Shell Escaping for Bash and Command-Line Arguments

Shell Escaping

Shell (Bash) interprets many characters specially — spaces split arguments, $ triggers variable expansion, backticks run commands, and glob patterns expand filenames. Proper escaping is critical for scripts that handle filenames, user input, or data with special characters.

Three Escaping Mechanisms

Bash provides three ways to prevent special interpretation:

1. Single Quotes — Strongest Escaping

Everything between single quotes is literal. No character is special, not even backslash:

echo 'Hello $USER, the cost is $5.00'
# Output: Hello $USER, the cost is $5.00

The only character you cannot include is a single quote itself.

2. Double Quotes — Selective Escaping

Double quotes prevent word splitting and globbing but allow variable expansion and command substitution:

echo "Hello $USER"           # expands $USER
echo "Today is $(date)"      # runs command
echo "Literal \$dollar"      # backslash escapes the $

Inside double quotes, only these characters are special: $, \`, \, ", !` (in interactive shells).

3. Backslash — Single Character Escape

A backslash before any character makes it literal:

echo Hello\ World       # "Hello World" (space is literal)
echo Price\: \$10       # "Price: $10"

Characters That Need Escaping

Without quoting, these characters have special meaning:

Space, Tab, Newline   → argument separators
*  ?  [  ]            → glob / filename expansion
$                     → variable expansion
\`                     → command substitution
"  '                  → quoting
\\                     → escape character
|  &  ;               → command operators
(  )                  → subshell
<  >                  → redirection
#                     → comment
~                     → home directory
!                     → history expansion (interactive)
{  }                  → brace expansion

Embedding Single Quotes in Single-Quoted Strings

Since single quotes cannot be escaped inside single quotes, use concatenation:

echo 'It'\'s a test'    # It's a test
# This is actually: 'It' + \' + 's a test'

Safe Variable Usage

Always double-quote variable expansions to prevent word splitting and globbing:

# Dangerous — breaks on filenames with spaces
for f in $files; do rm $f; done

# Safe — preserves filenames as-is
for f in "$files"; do rm "$f"; done

printf for Programmatic Escaping

Use printf %q to generate a shell-escaped version of any string:

printf '%q' "Hello World! $5"
# Output: Hello\\ World\\!\\ \\$5