https://sxz.io/python-subprocess-command-injection-tutorial/