Honestly, the fix is to only allow alphanumeric input to shellscripts. Anything ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		pizzalife on Nov 22, 2024 \| parent \| context \| favorite \| on: TIL: Some surprising code execution sources in bas... Honestly, the fix is to only allow alphanumeric input to shellscripts. Anything else invariably fails at some point.

lmz on Nov 22, 2024 [–]

Taint checking as in Perl would be nice.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact