It's perfectly safe to do that; exec() doesn't reinterpret the arguments through the shell, but passes them verbatim to the program. Just make sure you don't u

It's perfectly safe to do that; exec() doesn't reinterpret the arguments through the shell, but passes them verbatim to the program. Just make sure you don't use 'system()' (or the equivalent call in whatever your language is) to launch things. It was a bad idea from the start.