{"action":"created","issue":{"url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/issues/1208","labels_url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/issues/1208/labels{/name}","comments_url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/issues/1208/comments","events_url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/issues/1208/events","html_url":"https://github.com/ForgeEssentials/ForgeEssentialsMain/issues/1208","id":52792355,"number":1208,"title":"[Request] bash/batch file exec from MCChat","user":{"login":"Aexoyir","id":6588130,"avatar_url":"https://avatars.githubusercontent.com/u/6588130?v=3","gravatar_id":"","url":"https://api.github.com/users/Aexoyir","html_url":"https://github.com/Aexoyir","followers_url":"https://api.github.com/users/Aexoyir/followers","following_url":"https://api.github.com/users/Aexoyir/following{/other_user}","gists_url":"https://api.github.com/users/Aexoyir/gists{/gist_id}","starred_url":"https://api.github.com/users/Aexoyir/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Aexoyir/subscriptions","organizations_url":"https://api.github.com/users/Aexoyir/orgs","repos_url":"https://api.github.com/users/Aexoyir/repos","events_url":"https://api.github.com/users/Aexoyir/events{/privacy}","received_events_url":"https://api.github.com/users/Aexoyir/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/labels/request","name":"request","color":"02d7e1"}],"state":"open","locked":false,"assignee":{"login":"luacs1998","id":1886269,"avatar_url":"https://avatars.githubusercontent.com/u/1886269?v=3","gravatar_id":"","url":"https://api.github.com/users/luacs1998","html_url":"https://github.com/luacs1998","followers_url":"https://api.github.com/users/luacs1998/followers","following_url":"https://api.github.com/users/luacs1998/following{/other_user}","gists_url":"https://api.github.com/users/luacs1998/gists{/gist_id}","starred_url":"https://api.github.com/users/luacs1998/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/luacs1998/subscriptions","organizations_url":"https://api.github.com/users/luacs1998/orgs","repos_url":"https://api.github.com/users/luacs1998/repos","events_url":"https://api.github.com/users/luacs1998/events{/privacy}","received_events_url":"https://api.github.com/users/luacs1998/received_events","type":"User","site_admin":false},"milestone":null,"comments":12,"created_at":"2014-12-24T03:01:18Z","updated_at":"2015-01-12T18:12:03Z","closed_at":null,"body":"Running commands like reboot.sh or \"mumbleBan.sh somecheatername\" could be very useful and powerful. Security is the issue.\r\n\r\nPermissions and separated folders for user/level commands are possibilties, ex,\r\nmcScripts/ops/restart.sh\r\nmcScripts/mods/clearplayercache.sh luacs"},"comment":{"url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/issues/comments/69616139","html_url":"https://github.com/ForgeEssentials/ForgeEssentialsMain/issues/1208#issuecomment-69616139","issue_url":"https://api.github.com/repos/ForgeEssentials/ForgeEssentialsMain/issues/1208","id":69616139,"user":{"login":"dragonpaw","id":74992,"avatar_url":"https://avatars.githubusercontent.com/u/74992?v=3","gravatar_id":"","url":"https://api.github.com/users/dragonpaw","html_url":"https://github.com/dragonpaw","followers_url":"https://api.github.com/users/dragonpaw/followers","following_url":"https://api.github.com/users/dragonpaw/following{/other_user}","gists_url":"https://api.github.com/users/dragonpaw/gists{/gist_id}","starred_url":"https://api.github.com/users/dragonpaw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dragonpaw/subscriptions","organizations_url":"https://api.github.com/users/dragonpaw/orgs","repos_url":"https://api.github.com/users/dragonpaw/repos","events_url":"https://api.github.com/users/dragonpaw/events{/privacy}","received_events_url":"https://api.github.com/users/dragonpaw/received_events","type":"User","site_admin":false},"created_at":"2015-01-12T18:12:03Z","updated_at":"2015-01-12T18:12:03Z","body":"Having the feature off by default is fine and everyone's agreed on that I think. The question is how do you make it be still safe when it is on? Escaping of arguments is unsafe no matter what in shell, so that can't be made safe. How would you sanitize the args without a config file to define what they should be?"}}