Skip to content

Possible injection in .bashrc #3

@BullShark

Description

@BullShark

Don't pass user-supplied data in a context where it could be interpreted as code.
BAD: ssh host "rm $file"
GOOD: ssh host "$(printf 'rm %q' "$file")"
See http://mywiki.wooledge.org/BashProgramming/05

In the snap list | awk while loop

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions