Please add allowed symbols check. Should be done in every bash script with such globs in use.