43 lines
729 B
Plaintext
43 lines
729 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
import os
|
|
|
|
value = input()
|
|
command = 'os.system("%s")' % value
|
|
|
|
def evaluate(command, file, mode):
|
|
eval(command) # Sensitive.
|
|
|
|
eval(command) # Sensitive. Dynamic code
|
|
|
|
def execute(code, file, mode):
|
|
exec(code) # Sensitive.
|
|
exec(compile(code, file, mode)) # Sensitive.
|
|
|
|
exec(command) # Sensitive.
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::../message.adoc[]
|
|
|
|
'''
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::../comments-and-links.adoc[]
|
|
endif::env-github,rspecator-view[]
|