@main[]
$s[
^taint[html][ some <a href="/?a&b">html</a> code ]
^taint[file-spec][ * ? " | ]
^taint[ some <?dirty?> code ] trailing whitespace here -> ]
env and args tainting tests:
1. $f[^file::exec[cat^os[-windows].sh; $.HTTP_OK[$s] $.REMOTE_ADDR[allowed];env;HTTP_OK]]
=$f.text=
2. $f[^file::exec[cat^os[-windows].sh; ;args;$s]]
=$f.text=
3. $f[^file::exec[cat^os[-windows].sh; ;args;"quo ted";-opt ion]]
=$f.text=
4. $f[^file::exec[cat^os[-windows].sh; ;args;1^^ 2& 3` 4< 5> 6% 7! 8" 9| 10( 11) 12^; 13= 14* 15? 16\ 17! 18[ 19] 20']]
=$f.text=
5. $f[^file::exec[cat^os[-windows].sh; ;args;un"quo ted"]]
=$f.text=
#6. $f[^file::exec[cat^os[-windows].sh; ;args;strange: \r\n - enter, Debian specific (all versions), FreeBSD, CentOS, MacOS - OK]]
# =$f.text=
E-mail: