Bash as Rest service (unsecure)

bashrestful.py

# -*- coding: utf-8 -*-
from flask import Flask
from flask import jsonify, request, render_template
import subprocess

app = Flask(__name__)


@app.route('/bash/run/', methods=['GET']) 
def run_script():
    command      = request.args.get('command', default = '', type = str)
 
    print(command)
    ok  = False

    
    try:
        subprocess.Popen(command, shell=True,stdin=None, stdout=None, stderr=None, close_fds=True)  
        #print(p.read())  
        ok  	= True

    except Exception as e:
        print(e)
    print(ok)
    return jsonify(ok)




if __name__ == '__main__':
	app.run(host='0.0.0.0',port='5050',debug=False) # 

http://127.0.0.1:5050/bash/run/?command=firefox