#!/usr/bin/env python3

import subprocess
import pipes

evil_input = '&& cat /etc/passwd'
#evil_input = '\'&& cat /etc/passwd'
#evil_input = pipes.quote(evil_input)
command = 'ls -l {}'.format(evil_input)
print(command)
subprocess.Popen(command.split(), shell=False)
