> This has less to do with wildcards and more with passing arbitrary filenames I think the issue being pointed out was that wildcards are expanded to filenames

> This has less to do with wildcards and more with passing arbitrary filenames I think the issue being pointed out was that wildcards are expanded to filenames before parsing of arguments, which of course means you may not know what all filenames you're passing. While this is something we all know, it can certainly slip through the cracks when you decide you just want to delete everything in the folder. > This "vulnerability" ... I don't know that it's a vulnerability proper so much as a warning to think before hitting enter.