3 ms·
I’m sure I saw a quote from a bash developer saying that bash shouldn’t be considered for security, but dont recall where I saw it. I’d love to know a source if
by hsbauauvhabzb 4y ago
I’m sure I saw a quote from a bash developer saying that bash shouldn’t be considered for security, but dont recall where I saw it. I’d love to know a source if anyone knows where I can find it.
- Too 4y agoNo need to quote a security expert to realize that. A language that mixes code and data as the same variable type, with only a single missing quote needed to turn any variable into a full RCE. On top of that, add all the obscure syntax, stringly typed data for everything and with whatever measly error handling it actually does support being defaulted to off. Guess what you get.