Closed
Description
If huh is used in tandem with wish, using huh.Text exposes the server to RCE (for example, EDITOR=vim, then the user simply has to type :! rm -rf /
Describe the solution you'd like
Request boolean to disable editor.
Describe alternatives you've considered
A docker-compose sandbox would mitigate the issue - to a degree, better to have an option to completely turn off EDITOR however.