> If you allow your script to get input from the untrusted sources This wasn't the problem. The problem wasn't with scripts getting untrusted input. The prob

> If you allow your script to get input from the untrusted sources This wasn't the problem. The problem wasn't with scripts getting untrusted input. The problem was with bash getting untrusted input -- input that isn't supposed to be evalled in the first place.