BTW, the qvm-run option’s name and description are a little bit misleading. It’s no longer replacing just a few known dangerous characters (escape sequences) but rather it’s strictly replacing everything except a list of safe characters (printable ASCII, tab, newline, return, backspace, bell):
/*
* The Qubes OS Project, http://www.qubes-os.org
*
* Copyright (C) 2020 Paweł Marczewski <pawel@invisiblethingslab.com>
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*
*/
show original
3 Likes