News for hackers. Stuff that matters.

A comment on URL is also a shell script that executes some malicious(?) code. Parent comment

Re:URL is also a shell script that executes some malicious(?... by Calzifer on Friday September 09, 2022 @07:38AM (#32777947)
No it is not. The single quote example is wrong because the evaluation part $(...) is unquoted. Take a closer look. The first single quote part ends after the first semicolon right before the $(
[ Parent | on HN ]
Re:URL is also a shell script that executes some malicious(?... by IshKebab on Saturday September 10, 2022 @06:22AM (#32789327)
It's not wrong, it's just demonstrating that slapping single quotes around a string is not sufficient to make it safe. You need to escape the string properly. Guess how many people do that.
[ Parent | on HN ]