Hacker News Reader

Comment by manjalyc | Hacker News Reader

On the other hand, seperating concerns by process boundaries leads to more secure, composable and stable code. By not reinventing the wheel, you avoid a whole class of problems. Of course a stable API or library might be better, but convenience always wins out.

View on HN

No-no, I mean launch processes by all means, just without shell substitutions.

Ever noticed that docker (and k8s) accept command line as an array? That's the way to go. It does not expand any env variables, path expansions (.. or *). Like

   command: ["java", "Main.java"]

But people hack it in order to get shell features, and that is the failure I mean:

   command: ["sh", "-c", "java Main.java"]

the second example runs shell, and shell is for humans, so is vulnerable to the attacks above.

Reply on news.ycombinator.com