@parkr I don't see any security problem here, what kind of problem were you envisioning?

Regardless, it's probably wise to make the regex more strict. Something like:

```ruby
@markup.strip.match(/\A(\d+) ?(\S*)\Z/)
```

Note the `.strip`, the anchoring of beginning and end of string, optional space, and the non-whitespace-only match in filename part.