Expanding variables in file contents

by

Another option is to use ExpandString() e.g.:

$expanded = $ExecutionContext.InvokeCommand.ExpandString($template)

Invoke-Expression will also work. However be careful. Both of these options are capable of executing arbitrary code e.g.:

# Contents of file template.txt
"EvilString";$(remove-item -whatif c:\ -r -force -confirm:$false -ea 0)

$template = gc template.txt
iex $template # could result in a bad day

If you want to have a “safe” string eval without the potential to accidentally run code then you can combine PowerShell jobs and restricted runspaces to do just that e.g.:

PS> $InitSB = {$ExecutionContext.SessionState.Applications.Clear(); $ExecutionContext.SessionState.Scripts.Clear(); Get-Command | %{$_.Visibility = 'Private'}}
PS> $SafeStringEvalSB = {param($str) $str}
PS> $job = Start-Job -Init $InitSB -ScriptBlock $SafeStringEvalSB -ArgumentList '$foo (Notepad.exe) bar'
PS> Wait-Job $job > $null
PS> Receive-Job $job
$foo (Notepad.exe) bar

Now if you attempt to use an expression in the string that uses a cmdlet, this will not execute the command:

PS> $job = Start-Job -Init $InitSB -ScriptBlock $SafeStringEvalSB -ArgumentList '$foo $(Start-Process Notepad.exe) bar'
PS> Wait-Job $job > $null
PS> Receive-Job $job
$foo $(Start-Process Notepad.exe) bar

If you would like to see a failure if a command is attempted, then use $ExecutionContext.InvokeCommand.ExpandString to expand the $str parameter.

More Related Contents:

  1. Using a Variable (PowerShell) inside of a command
  2. How do I pass variables with the Invoke-Command cmdlet?
  3. Why won’t Variable update?
  4. Calling dynamic variable in PowerShell
  5. If Statement Against Dynamic Variable [duplicate]
  6. Create an incrementing variable from 2 variables in PowerShell
  7. Diskpart detail disk with powershell
  8. PowerShell, formatting values in another culture
  9. Powershell Multidimensional Arrays
  10. How can I split a text file using PowerShell?
  11. How to automate either PowerShell or PowerShell Core for same machine
  12. What does $($variableName) mean in expandable strings in PowerShell?
  13. How can I write a PowerShell alias with arguments in the middle?
  14. Terminating a script in PowerShell
  15. Wait for multiple simultaneous powershell commands in other sessions to finish before running next commands
  16. Multiple foreground colors in PowerShell in one command
  17. How do I find the CPU and RAM usage using PowerShell?
  18. PowerShell: Store Entire Text File Contents in Variable
  19. Comparing array variables in PowerShell
  20. How to access the 64-bit registry from a 32-bit Powershell instance?
  21. How Does Member Enumeration Work in PowerShell 3?
  22. Powershell pitfalls
  23. How to use powershell to reorder CSV columns?
  24. PowerShell for Software Inventory
  25. Using expanding strings as Powershell function parameters
  26. Get-Content -wait not working as described in the documentation
  27. Hiding the full file path in a PowerShell command prompt in VSCode
  28. How does the Count property work in Powershell?
  29. Exit code from a batch file is not propagated to the parent powershell script
  30. How to execute a PowerShell script only before a web deploy Publish task in VS 2012?

Leave a Comment