Unverified50% confidenceFactExact time
Shell glob expansion is completed before command execution, so programs like sed see the expanded real paths rather than the original strings containing wildcards.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAny guard that inspects command arguments as strings before shell execution can only see the user's original spelling, not the set of files the shell will actually access.67% similarUnverifiedThe parameter expansion syntax ${path##*/} built into Bash and Zsh can achieve the same effect as basename and eliminates subprocess overhead in loop scenarios.65% similarUnverifiedBash permission rules with the intermediate pattern :* were previously skipped in settings files; the new version makes them take effect from all sources and issues a warning about the matching method at startup.62% similarUnverifiedWhen Node.js's exec() or spawn() is called with shell: true, the operating system first passes the entire command string to /bin/sh for parsing before execution.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1000601API
curl https://kongchang.com/api/v1/knowledge/claims/1000601MCP
get_claim(id=1000601)