• perpetualmaniac
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      It’s fine for the majority of cases. Shell vulnerabilities exist when you take in user input. If it’s a personal project or you are composing the string to pass to the shell without user input then it’s perfectly fine.