2 ms·
> ssh chooses to unquote the string > splitting it into two parts wrong, ssh does no argument splitting > then running the program echo wrong, it passes the
by blueflow 1y ago
> ssh chooses to unquote the string
> splitting it into two parts
wrong, ssh does no argument splitting
> then running the program echo
wrong, it passes the string to the users login shell, whatever program that is. See sshd(8).
> The fact it does this via a separate program is irrelevant
just gently caress yourself.
- immibis 1y agothe fact that ssh chooses to invoke another program to split arguments instead of splitting arguments itself is a distinction without a difference.