POSIX wordexp(3) is dangerous yossarian.net

The post warns that POSIX `wordexp(3)`, often used for tilde expansion in C, can execute commands embedded in its input by default. It argues that even `WRDE_NOCMD` may be bypassed in some implementations, including musl and reportedly macOS’s helper, and advises against using the API on untrusted input.