Hacker News new | ask | show | jobs
by a1369209993 2648 days ago

  if [ x$CMDSH = xshell ] ; then
      grep -qP $BLKLST <<<"$CMD" && CMD='panic' # skip obviously bad commands like
   rm -rf /
      # (this isn't a security thing, we just want to catch stupid mistakes)
  fi
1 comments

Is this a thing people do? I think I like the idea of it, but haven't heard about it before.
Have comments containing text that could be interpreted as a call to 'break-the-world(err=/dev/null,filter=const(true))'? Not often, but it only needs to go wrong once.

Checking for obvious problems should happen inside eg rm (see `rm --help | grep root`), not in a random shell script, but I didn't want to bother coming up with a better excuse to have rm -rf / inside a comment.

Usually the errors caused by syntax-unware text mangling are either obvious and harmless (so not as punchy of a example) or much more subtle than "destroys literally the entire system".