Use span instead of exec because security (thanks @theojulienne)