Can we add a command option?

[odscjames]

See fce6423

This would just let app.json define any dokku command to run.

For security, I said $APP_NAME had to be in the command.

But I realised the security of making sure $APP_NAME is there is probably not enough.

You can run

dokku apps:list $APP_NAME 

Which becomes

dokku apps:list whateveryouwant

And you'll still get a full list of apps on the servers.

So there may be other holes where people can do destructive actions on other apps on the server.