Node: Escape JSON string to use in shell exec

Question

I am currently writing JSON to a file, which I pipe to a shell command:

const { exec } = require('child_process');
fs.writeFileSync('file.json', JSON.stringify(data), 'utf8');
exec(`cat file.json | ./binary_file`, {}, callback);

Rather than writing to a file, how can I safely print/pass this to my binary_file through Node?

const { exec } = require('child_process');
exec(`echo '${JSON.stringify(data)}' | ./binary_file`, {}, callback);

Is there some way to safely escape strings for shell execution, or is there a better way to accomplish this?

Or, is writing/reading a file any safer?

It reads from STDIN and expects JSON string, but curious why that matters? — d-_-b
– d-_-b, Commented Aug 15, 2018 at 19:27

that other guy · Accepted Answer · 2018-08-15 19:59:48Z

1

A shell won't mangle your data if you don't run a shell:

const { spawn } = require('child_process');
const p = spawn('/path/to/your_executable');

// Write arbitrary data on stdin instead of
// passing it through a shell to have echo do it
p.stdin.write("{!`$)(*%]");

// Make sure to close stdin afterwards
p.stdin.end();

answered Aug 15, 2018 at 19:59

that other guy

125k12 gold badges187 silver badges214 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Node: Escape JSON string to use in shell exec

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related