4 ms·

Escaping in the $ interpolator is a planned feature. You definitely have a point, but the project was made public 4 days ago and deserves a little bit of slack

• pwdisswordfish8 5y ago
  Injection vulnerabilities are one of the most pervasive and well-known kinds of bugs, especially in shell scripting. This should have been considered on day 1 and implemented before anything else started depending on it being otherwise. Fixing bad designs after the fact is long and painful. Just look at PHP.
  • lobstrosity420 5y ago
    We are talking pre alpha stages of development here, nothing that depends on this can reasonably expect for the API to not break several times over in the near future. This software is still figuratively on it's day 1 of development. Weather you or someone else would have implemented this feature faster matters very little to me.
    • pwdisswordfish8 5y ago
      Then it should have carried prominent notices to that effect or at least used a different version number. Version 1.0.2 hardly screams ‘pre-alpha’. https://github.com/google/zx/blob/5ba6b775c4c589ecf81a41dfc91a6a5df00449b9/package.json#L3 https://github.com/google/zx/blob/5ba6b775c4c589ecf81a41dfc9...
• maxgee 5y ago
  no?
• cutemonster 5y ago
  Looks nice I think :-) I wonder if it can work with Deno, and maybe even with Deno's security features: https://deno.land/manual/getting_started/permissions https://deno.land/manual/getting_started/permissions
• pvtmert 5y ago
  These stuff generally called as "0-day".