Stefan Sperling wrote on Tue, May 09, 2017 at 11:26:26 +0200: > I am fine with restricting the PATH if that's a concern. Not sure what > this would look like on Windows but we could probably restrict it to > something like "/usr/bin:/usr/local/bin" on Unix-like systems without > much risk of breaking this functionality.
I'm pretty sure there is abstraction for "default path" which we should use rather than hardcode a PATH string. (getconf(3) or so?) Hopefully it's already wrapped in APR, too, which would address the windows part of your question. Cheers, Daniel

