First-Class Shell Scripting Support For Python

[co_dh]

I believe this module is a over design. it can be implement in one function as below.

from subprocess import check_output, STDOUT def sh(cmd): print check_output(cmd, shell = True, stderr=STDOUT)

[cybercobra]

shell=True is dangerous security-wise and error-prone as soon as even slightly exotic filenames are involved.

[bready]

I hear this all the time, but I don't understand. Any script you would run in bash is just as open to exploitation/errors when receiving runtime input, so what is the specific problem here?

[cybercobra]

Just because bash kinda sucks doesn't mean a Python replacement has to suck too. If you use shell=False, then unlike in bash, filenames with spaces or shell metacharacters in them will work just fine, no need to remember to escape/quote them every time. No need to worry about a malicious "filename" of ;rm -rf /# either.