Skip to content

Shell Security Problems

Jump to bottom Edit New page
andychu edited this page Jan 5, 2017 · 10 revisions

TODO: Link to good resources on the web.

  • rm -f * -- a file named '-r' can be interpreted as a flag

  • globbing happens after variable expansion. code as data

  • escaping from generating programs (shell, HTML, what else?)

  • bash shellshock: this was storing code in environment variables. code as data is an anti-pattern.

Add a custom footer
Add a custom sidebar
Clone this wiki locally