From f370a356730af570524db74fc7782fdbaa2b7b44 Mon Sep 17 00:00:00 2001 From: koalaman Date: Fri, 7 Nov 2014 11:28:33 -0800 Subject: [PATCH] Updated SC2029 (markdown) --- SC2029.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/SC2029.md b/SC2029.md index 1ce6607..2d3ec69 100644 --- a/SC2029.md +++ b/SC2029.md @@ -24,4 +24,6 @@ By escaping the `$` in `$HOSTNAME`, it will be transmitted literally and evaluat ### Contraindications -If you do want your string expanded on the client side, you can safely ignore this message. \ No newline at end of file +If you do want your string expanded on the client side, you can safely ignore this message. + +Keep in mind that the expanded string will be evaluated again on the server side, so for arbitrary variables and command output, you may need to add a layer of escaping with e.g. `printf %q`. \ No newline at end of file