> we have never seen any exploits with bash [..] or ssh[..]? Sure we have, and they have nothing to do with the static site generator. You're talking about com

> we have never seen any exploits with bash [..] or ssh[..]? Sure we have, and they have nothing to do with the static site generator. You're talking about compromising the web server in general. Totally unrelated. And you don't even need a web server with an SSG. I use a one locally and upload to S3. Maybe I "just don't know the weird ways things can be exploited", but I simply can't think of any conceivable angles on that. References to mysterious unknowable hacking superpowers aren't really useful. Paranoia is to be encouraged in security, but sometimes it really is just plain secure!