> Anyone that has untrusted input embedded within a shell script does not know what they are doing. That's obviously false. To the contrary, I have serious con

> Anyone that has untrusted input embedded within a shell script does not know what they are doing. That's obviously false. To the contrary, I have serious concerns about the judgement of anyone that thinks an interpreter like bash should parse the contents of every environment variable on startup.