Ok, so just to make my paranoid ass feel better..
Can we at least add a simple trap for a few characters that all executables would require to be run?
We used to trap for slashes (\), quotes (" and ') and certain sql stmnts (INSERT INTO, DROP TABLE, etc) back in the day. Just disallow the few characters that all scripts would require if someone was to try the injection.
Governments and other malicious types would just love to snag our coin.
I take this stuff VERY seriously. Our hard earned money is at stake here. No matter how small it may seem, it never hurts to code another trap.
Edit: I'll throw in another 10,000 BTS bounty to have that trap coded in.
Get it done (and provable) within v0.10.0 and I'll make it a 30,000 BTS bounty. Anybody else wanna pitch in?