Surely if your command line is tainted then you have bigger problems? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		arethuza on March 15, 2013 \| parent \| context \| favorite \| on: PAWK - A Python line processor (like AWK) Surely if your command line is tainted then you have bigger problems?

willvarfar on March 19, 2013 [–]

people often have websites that take some parameters and then pass them to grep or whatever, in the exact same way that they pass parameters that came from the user to an SQL engine.

As long as its data, no problem...

Injection attacks are injection attacks.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact