3 ms·

> Requires nothing but Apache running, minimizes attack surface area Shellshock comes to mind as a counter point.

• spc476 7y ago
  It's only a concern if the CGI script is written in shell or uses the `system()` function.