help-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-bash] avoiding shell variable expansion


From: Andy Chu
Subject: Re: [Help-bash] avoiding shell variable expansion
Date: Thu, 3 Oct 2019 23:29:16 -0700

> > When someone's asking about "code injection", they're asking about
processing data from elsewhere.  So the command isn't written literally in
the source, but read from somewhere else.
>
> It’s not an answer at all then: putting a command into array does _not_
sanitize it.

He didn't ask about sanitizing a shell string.  He asked about avoiding
shell expansion.  You misread the question, not me.

Andy


reply via email to

[Prev in Thread] Current Thread [Next in Thread]