|
|
|
|
|
|
by voiper1
883 days ago
|
|
|
Nope - there's at least one layer of safety: >For security, all template variables are escaped: >// This will run `ls 'foo.js; rm -rf /'`
>const results = await $`ls ${filename}`;
>console.log(results.stderr.toString()); // ls: cannot access 'foo.js; rm -rf /': No such file or directory |
|
|