Instead of using a function definition in the Shellshock attack against CGl programs, can we directly put shell commands inside the User-Agent field, so when Bash is triggered, the shell command can be executed? S