Malicious code injection vial loop params via `eval`

#!/bin/bash

param1=x
param2=' '
param3=

declare -A desc=(
    [param1]=--some-weird-parameter-name
    [param2]=--param-2
    [param3]=--parameter3
)

for p in param1 param2 '(echo Malicious code > /dev/tty)' param3
do
    eval "[[ \$$p ]]" ||
    {
        echo "${desc[$p]} must be set" >&2
        exit 1
    }
done