wget -r --no-host-directories in $HOME should be taken care of
Mentioned in wget matrix channel. It could be accidentally lead to overwriting .bashrc
(if -nc/--no-clobber
is given) or to download a file like .bash_aliases
(if it doesn't exist) which is then sourced by .bashrc
. Sourcing
could change $PATH and/or could lead to executing downloaded files on the next login.
Should we protect the user against shooting itself into the foot ?