Function TestExecCommandNoShellInterpolation

shell/trace_test.go:329–383

TestExecCommandNoShellInterpolation verifies that special characters are NOT interpreted when passed in command array

(t *testing.T)

// TestExecCommandNoShellInterpolation verifies that special characters
// are NOT interpreted when passed in command array
func TestExecCommandNoShellInterpolation(t *testing.T) {
	// These strings would be dangerous if passed to a shell
	// But in array form, they're just literal strings
	testCases := []struct {
		name    string
		command []string
	}{
		{
			name:    "semicolon injection",
			command: []string{"echo", "safe; rm -rf /"},
		},
		{
			name:    "backtick injection",
			command: []string{"echo", "`whoami`"},
		},
		{
			name:    "dollar injection",
			command: []string{"echo", "$(id)"},
		},
		{
			name:    "pipe injection",
			command: []string{"echo", "data | cat /etc/passwd"},
		},
		{
			name:    "redirect injection",
			command: []string{"echo", "> /tmp/evil"},
		},
		{
			name:    "newline injection",
			command: []string{"echo", "line1\nrm -rf /"},
		},
	}

	for _, tc := range testCases {
		t.Run(tc.name, func(t *testing.T) {
			// In proper array exec, the "dangerous" part is always
			// the second element - it's never parsed or split
			if len(tc.command) != 2 {
				t.Errorf("Expected 2-element array, got %d", len(tc.command))
			}
			if tc.command[0] != "echo" {
				t.Error("First element should be 'echo'")
			}
			// The second element contains the "dangerous" string
			// but it's just a literal string, not executed
			if tc.command[1] == "" {
				t.Error("Second element should not be empty")
			}

			// Key assertion: the command array length proves no shell parsing
			// Shell would split "echo safe; rm -rf /" into multiple commands
			// Array exec keeps it as ["echo", "safe; rm -rf /"] = 2 elements
		})
	}
}