News Score: Score the News, Sort the News, Rewrite the Headlines

Safe Shell String Interpolation

Let's take the toy problem of getting the user's name and printing out a rainbow greeting banner. An inexperienced developer might solve the problem like this:import { exec } from "node:child_process" import { promisify } from "node:util" const execPromise = promisify(exec) const username = prompt("Hello, what's your name?") const banner = (await execPromise(`figlet "Welcome, ${username}" | lolcat -f`)).stdout // security vulnerability! console.log(banner)This works as you might expect:However, ...

Read more at samwing.dev

© News Score  score the news, sort the news, rewrite the headlines