control and data together, sometimes it may be unavoidable. Properly quote arguments
and escape any special characters within those arguments. The most conservative
approach is to escape or filter all characters that do not pass an extremely strict whitelist
(such as everything that is not alphanumeric or white space). If some special characters