3 ms·
Template tag functions in JS can intercept the interpolation values passed in. So it's possible they're automatically escaping to prevent shell injection. They
by pitaj 5y ago
Template tag functions in JS can intercept the interpolation values passed in. So it's possible they're automatically escaping to prevent shell injection.
They could also be parsing out the first word as the command and not using shell execution at all.
- lixtra 5y agoIndeed, escaping is what they seem to do.