4 ms·
Two other important points: 1. Those command line programs weren't necessarily designed with an adversarial user in mind! Sanitizing input to prevent shell esc
by throwawayjava 8y ago
Two other important points:
1. Those command line programs weren't necessarily designed with an adversarial user in mind! Sanitizing input to prevent shell escape sequences is not enough. You really need to sandbox well.
2. For some tasks, it might be easy for a malicious user to guess which command-line tool you are using. You might be getting way less depth out of obscurity than you think you are.
- jacquesm 8y agoThat's one very important reason why you want that queue. That way you at least break the most obvious path to return output.