It's possible to bypass restrictions with "poisoned NUL bute"
vulners.com/securityvulns/securityvulns:doc:30018