Input validation will not always prevent OS command injection, especially if you are
required to support free-form text fields that could contain arbitrary characters. For
example, when invoking a mail program, you might need to allow the subject field
to contain otherwise-dangerous inputs like ";" and ">" characters, which would need