https://kevin-haas.com/posts/command-injection/