> It is the intermediary subshell in system() that is the root of all evil Certainly the worst of it, but even if you pass the untrusted data as a discrete arg

> It is the intermediary subshell in system() that is the root of all evil Certainly the worst of it, but even if you pass the untrusted data as a discrete arguments you're still vulnerable to parameter injection. Let's say, for example, that you're running ["find", USER_SUPPLIED_PATH, "-type", "f"]. If the user supplies "-delete" as the path, the resulting behaviour would not be as intended.