And to be clear, I'm talking about providing at least one legit use for passing user input directly to exec without any kind of filtering...
[1] https://news.ycombinator.com/item?id=7665232
He deliberately wrote vulnerable code to test his auditing script. There are more repos like this.
And to be clear, I'm talking about providing at least one legit use for passing user input directly to exec without any kind of filtering...