security risk

[sinteur]

Try this:

yourbot shellcmd ../../../../../../../../usr/bin/whoami

[coderofsalvation]

good point.
Since you seem to be into security, any idea how to prevent this?
Would detecting '../' be sufficient you think?
Would ♥♥♥ to see a pullrequest.

[sinteur]

Run the bot in a jail :-)