3 ms·
This is completely safe: [ "${payload}" -eq 42 ] This can evaluate arbitrary code: [[ "${payload}" -eq 42 ]] Here is one example of a malicious payload: pa
by PhilipRoman 9mo ago
This is completely safe: [ "${payload}" -eq 42 ]
This can evaluate arbitrary code: [[ "${payload}" -eq 42 ]]
Here is one example of a malicious payload:
payload='a[$(touch /tmp/pwned)]'
- ndsipa_pomu 9mo agoThanks. Now I need to figure out whether (( payload == 42 )) is safe.
- ndsipa_pomu 9mo agoIt appears not.