I found it to be quite thorough and lucid in its explanation of the rationales behind each suggestion, including the one you mentioned. Perhaps you are referri

I found it to be quite thorough and lucid in its explanation of the rationales behind each suggestion, including the one you mentioned. Perhaps you are referring to the first section which is introduced as being a brief tl;dr: > Here’s a quick summary about how to do it correctly, for the impatient who “just want the answer”. The full document below that tldr includes for example this explanation of the reason for using ./* over *. Namely, flag injection: > This is important because almost all commands will interpret a string beginning with dash as an option, not as a filename, until they see something that does not begin with dash. Globs are expanded by the shell into a list of filenames, and dash is earlier in the sort order compared to before alphanumerics, so it is easy for attackers to make this happen.