2 ms·
Only if you are getting input from untrusted users
by rat87 2y ago
Only if you are getting input from untrusted users
- remus 2y agoimo it's best to just avoid it altogether. Requirements change, and what was once a trusted input can become untrusted input.
- rat87 2y agoGenerally you shouldn't be passing random data from the web to shell scripts. Maybe I haven't done the right type of work but having to deal with fidlg bits it's much more likely not passing it to be shell will cause issues (with stuff like executable paths)
- brookst 2y agoOr if your trusted users are fallible and could be tricked into providing unsafe inputs.