github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #37] Ampersands are not handled correctly when passed to "bash -c" #19

New issue

Closed

opened 2026-05-05 04:45:35 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 04:45:35 -06:00

Owner

Originally created by @blueyed on GitHub (Aug 20, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/37

The following should pass "http://example.com/?foo&bar" to firefox:

% firejail --debug /usr/bin/firefox http://example.com/\?foo\&bar
…
Starting /usr/bin/firefox http://example.com/?foo&bar 
execvp argument 0: /bin/bash
execvp argument 1: -c
execvp argument 2: /usr/bin/firefox http://example.com/?foo&bar 
Child process initialized
/bin/bash: bar: command not found

parent is shutting down, bye...

Originally created by @blueyed on GitHub (Aug 20, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/37 The following should pass "http://example.com/?foo&bar" to firefox: ``` % firejail --debug /usr/bin/firefox http://example.com/\?foo\&bar … Starting /usr/bin/firefox http://example.com/?foo&bar execvp argument 0: /bin/bash execvp argument 1: -c execvp argument 2: /usr/bin/firefox http://example.com/?foo&bar Child process initialized /bin/bash: bar: command not found parent is shutting down, bye... ```

gitea-mirror closed this issue

2026-05-05 04:45:37 -06:00

gitea-mirror commented

2026-05-05 04:45:42 -06:00

Author

Owner

@ghost commented on GitHub (Aug 20, 2015):

$ firejail --debug /usr/bin/firefox http://example.com/\\\?foo\\\&bar
...
Starting /usr/bin/firefox http://example.com/\?foo\&bar --new-instance 
execvp argument 0: /bin/bash
execvp argument 1: -c
execvp argument 2: /usr/bin/firefox http://example.com/\?foo\&bar --new-instance 
Child process initialized

@ghost commented on GitHub (Aug 20, 2015): ``` $ firejail --debug /usr/bin/firefox http://example.com/\\\?foo\\\&bar ... Starting /usr/bin/firefox http://example.com/\?foo\&bar --new-instance execvp argument 0: /bin/bash execvp argument 1: -c execvp argument 2: /usr/bin/firefox http://example.com/\?foo\&bar --new-instance Child process initialized ```

gitea-mirror commented

2026-05-05 04:45:47 -06:00

Author

Owner

@ghost commented on GitHub (Aug 20, 2015):

And if you don't like specifying three backslashes, you can do it with single backslashes (like your example) with this:

$ firejail --debug --shell=none /usr/bin/firefox firefox http://example.com/\?foo\&bar --new-instance
...
User namespace (noroot) installed
execvp argument 0: /usr/bin/firefox
execvp argument 1: firefox
execvp argument 2: http://example.com/?foo&bar
execvp argument 3: --new-instance
Child process initialized

@ghost commented on GitHub (Aug 20, 2015): And if you don't like specifying three backslashes, you can do it with single backslashes (like your example) with this: ``` $ firejail --debug --shell=none /usr/bin/firefox firefox http://example.com/\?foo\&bar --new-instance ... User namespace (noroot) installed execvp argument 0: /usr/bin/firefox execvp argument 1: firefox execvp argument 2: http://example.com/?foo&bar execvp argument 3: --new-instance Child process initialized ```

gitea-mirror commented

2026-05-05 04:45:50 -06:00

Author

Owner

@ghost commented on GitHub (Aug 21, 2015):

If you're using the latest version of firejail from Github, the command is now:

firejail --debug --shell=none /usr/bin/firefox http://example.com/\?foo\&bar

@ghost commented on GitHub (Aug 21, 2015): If you're using the latest version of firejail from Github, the command is now: ``` firejail --debug --shell=none /usr/bin/firefox http://example.com/\?foo\&bar ```

gitea-mirror commented

2026-05-05 04:45:53 -06:00

Author

Owner

@netblue30 commented on GitHub (Aug 21, 2015):

Yes, --shell=none is the solution. It was suggested by a an user trying to pass all kind of arguments form a shell script.

@netblue30 commented on GitHub (Aug 21, 2015): Yes, --shell=none is the solution. It was suggested by a an user trying to pass all kind of arguments form a shell script.

gitea-mirror referenced this issue

2026-05-05 10:02:40 -06:00

[PR #19] [MERGED] Fix typos in firejail-profile manpage #3505

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#19

No description provided.

Rows
Columns