rspec/rules/S1523/python/rule.adoc

43 lines
729 B
Plaintext

include::../description.adoc[]
include::../ask-yourself.adoc[]
include::../recommended.adoc[]
== Sensitive Code Example
----
import os
value = input()
command = 'os.system("%s")' % value
def evaluate(command, file, mode):
eval(command) # Sensitive.
eval(command) # Sensitive. Dynamic code
def execute(code, file, mode):
exec(code) # Sensitive.
exec(compile(code, file, mode)) # Sensitive.
exec(command) # Sensitive.
----
include::../see.adoc[]
ifdef::env-github,rspecator-view[]
'''
== Implementation Specification
(visible only on this page)
include::../message.adoc[]
'''
== Comments And Links
(visible only on this page)
include::../comments-and-links.adoc[]
endif::env-github,rspecator-view[]