are still needed, such as white space, wrap each argument in quotes after the escaping/
filtering step. Be careful of argument injection (CWE-88).
If the program to be executed allows arguments to be specified within an input file or
from standard input, then consider using that mode to pass arguments instead of the