3 ms·
Nope - there's at least one layer of safety: >For security, all template variables are escaped: >// This will run `ls 'foo.js; rm -rf /'` >const results = awa
by voiper1 3y ago
Nope - there's at least one layer of safety:
>For security, all template variables are escaped:
>// This will run `ls 'foo.js; rm -rf /'`
>const results = await $`ls ${filename}`;
>console.log(results.stderr.toString()); // ls: cannot access 'foo.js; rm -rf /': No such file or directory