3 ms·
You shouldn't pass unescaped/untrusted input into a subshell but your suggestion doesn't solve for every case. It protects against ";" but not path traversal wi
by blorgle 5y ago
You shouldn't pass unescaped/untrusted input into a subshell but your suggestion doesn't solve for every case. It protects against ";" but not path traversal with "../../../../../foo/bar".
- yjftsjthsd-h 5y agoYou'd have to cover that if you wrote your own library function, though; it's attack surface, but not uniquely so.