Comment by blueflow
5 days ago
> ssh chooses to unquote the string > splitting it into two parts
wrong, ssh does no argument splitting
> then running the program echo
wrong, it passes the string to the users login shell, whatever program that is. See sshd(8).
> The fact it does this via a separate program is irrelevant
just gently caress yourself.
the fact that ssh chooses to invoke another program to split arguments instead of splitting arguments itself is a distinction without a difference.