3 ms·
I use something like that in one of my programs, it's more or less like a hacky repl (well, without the loop part). It isn't a vulnerability in any way either,
by cosarara97 12y ago
I use something like that in one of my programs, it's more or less like a hacky repl (well, without the loop part). It isn't a vulnerability in any way either, since it's just the user running the code in his computer.
- dsl 12y agoSaid every author of a security bug ever. Edit: Not sure why I got downvoted. Developer #1 writes script that prompts technical user for input expecting (as parent did) that stdin will be a local console. Developer #2 later wraps script with a web form so sales/marketing can access the tool as well. https://www.owasp.org/index.php/Don't_trust_user_input https://www.owasp.org/index.php/Don't_trust_user_input
- adamnemecek 12y agoI guess the attack vector of you exploiting your own computer is very real. /s
- zenogais 12y agoThere's a better, easier way: https://docs.python.org/2/library/cmd.html https://docs.python.org/2/library/cmd.html