3 ms·
Yes, I agree and also thought of shell aliases when I read this. On top of that there's an argument forming somewhere in my mind that this also sets a bad secur
by drvdevd 10y ago
Yes, I agree and also thought of shell aliases when I read this. On top of that there's an argument forming somewhere in my mind that this also sets a bad security precedent in the long term... although I can't put my finger on it exactly. Any place where you unnecessarily widen the range of possible inputs (especially in a shell interface) seems to invite future abuse. For example, what if some future maintainer decides to make this a regex match?
- drvdevd 10y agoOr perhaps the more obvious: you try to disallow 'npm install' in some limited environment but allow other npm commands?