https://raghu.io/mitigating-command-injection/