oh-my-git
oh-my-git copied to clipboard
Security problem with levels files
There are some security problems, if I add some code to the levels file it is executed without checking.
e.g., in the levels/intro/risky file if I add, under [setup], code like this touch /home/$(whoami)/payload.txt the code is executed unchecked.
I suggest taking a different approach to run the command