4 ms·
Hmm I feel uncomfortable if there's an eval going on in there; what if the commandline is tainted etc? Its something to keep in mind.
by willvarfar 14y ago
Hmm I feel uncomfortable if there's an eval going on in there; what if the commandline is tainted etc? Its something to keep in mind.
- arethuza 14y agoSurely if your command line is tainted then you have bigger problems?
- willvarfar 14y agopeople often have websites that take some parameters and then pass them to grep or whatever, in the exact same way that they pass parameters that came from the user to an SQL engine. As long as its data, no problem... Injection attacks are injection attacks.