exec git命令拒绝重定向到Go中的文件

Go的

cmd.Run()

fork()

exec()

如果您 想要 外壳程序可以添加的功能（此处为重定向和复合命令语法），但又想避免安全风险，请从代码中将数据带外传递：

cmdArgs = []string{  "-c",// tells interpreter that script is next argument  `outfile=$1; shift; "$@" >"$outfile" && cat "$outfile"`, // script to execute  "_",         // this is $0  workingDir+"/logs/"+repoName+".log",          // $1, becomes outfile  "git", "log", "--numstat", "--reverse",       // remaining args are in "$@"  fmt.Sprintf("%s..HEAD", "89c98f5ec48c8ac383ea9e27d792c3dc77fa6240"),  "--pretty=format:=%P %H %an %ae %ad %at %s %b"}cmd := exec.Command("sh", cmdArgs...)

上面的内容等效于以下shell脚本：

#!/bin/sh#      ^^- not /bin/bash; this only guarantees support for POSIX syntaxoutfile=$1      # assign first positional argument to variable "$outfile"shift# rename $2 to $1, $3 to $2, etcif "$@" >"$outfile"; then  # run remaining arguments as a single command, stdout to outfile  cat "$outfile"# if that succeeded, then cat our "$outfile" to stdoutfi

请注意，我从内部删除了文字引号

--pretty=