Tainting is not pointless
The essence of command injection attacks in web applications