Reimagining Bash for Untrusted Contexts(capsulerun.github.io)

https://capsulerun.github.io/blog/reimagining-bash-for-untrusted-contexts