you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 weeks ago

If the content of the file isn't put into the context on some way, there's no point in reading it

Even in you use a subprocess/agent/whatever that reports back, it is injection vulnerable. Just a tiny bit more complicated

  • source
  • parent