Add an exception (prompt vars) and quote from the man pg

wileyhy
2023-07-04 16:02:49 -07:00
parent adb79ae332
commit 2624fd2534

@@ -76,7 +76,14 @@ Then you can use `touch "'; rm -rf \$'\x2F'; '.txt"` (or someone can trick you
### Exceptions ### Exceptions
Few and far between. Few and far between, such as, prompt variables. This from `man bash` "PROMPTING":
> After the string is decoded, it is expanded via parameter expansion, command
> substitution, arithmetic expansion, and quote removal, subject to the value of the promptvars shell
> option (see the description of the shopt command under SHELL BUILTIN COMMANDS below). This can have
> unwanted side effects if escaped portions of the string appear within command substitution or contain
> characters special to word expansion.
>
### Additional resources ### Additional resources