You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Not sure what the context is here, but I'm not sure it's desirable to escape all strings you would pass to exec. Try it with some commands that have quotes in them and see if they work for you.
I discovered this lib https://github.com/jimmycuadra/shellwords today which escapes commands. I don't think
exec()
escapes its input so this could be useful.Is there any downsides to just escaping by default? Or should escaping lib just be mentioned in the readme?
@jimmycuadra do you know?
The text was updated successfully, but these errors were encountered: