title: Safely execute command (avoid remote execution) with Golang
body: <p>I have a small app in go that handles http requests by executing a process and providing it with some input from the query string that a user supplied with the request. I was wondering what is the best way to filter that input against remote execution. The PHP alternative for example would be something like:
  <a href="http://php.net/manual/en/function.escapeshellarg.php" rel="nofollow">http://php.net/manual/en/function.escapeshellarg.php</a></p>
  
  <p>Right now the input should be a valid URL if that makes it easier, but ideally a generic filter would be preferred.</p>