3 ms·
You can download a directory containing a script, cd into that repo and less the file. ‘cd foo’ should never trigger arbitrary command execution. Ever. Contain
by hsbauauvhabzb 5y ago
You can download a directory containing a script, cd into that repo and less the file. ‘cd foo’ should never trigger arbitrary command execution. Ever.
Containerisation wouldn’t solve this, bash or similar would almost always be fun with near limitless boundaries.
- reegnz 5y agoI beg to disagree. I like my https://direnv.net/ https://direnv.net/ As long as it's strictly opt-in, it's fine. But it needs to be opt-in to be secure.