Curl to shell isn't so bad

Re:Curl to shell isn't so bad by y4mi on Sunday November 10, 2019 @12:10PM (#21498885)

Piping through tee doesn't trigger the sever side detection (it doesn't stop to read every few ms) and using the x flag isn't inherited, so it's gone as soon as subshells are invoked, which is pretty normal for an installation script.

This has all been mentioned in the linked comment thread

[ Parent | on HN ]

Re:Curl to shell isn't so bad by tln on Sunday November 10, 2019 @04:08PM (#21500219)

Actually the server side detection in [0] isn't really affected by putting tee in the middle... and neither does -x, of course.

Good point about -x being fallible to an adversarial script, even a simple set +x would be enough!

Where's the link where this has been mentioned? I missed it.

0: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

[ Parent | on HN ]