39 lines
799 B
Plaintext
39 lines
799 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
const cp = require('child_process');
|
|
|
|
// A shell will be spawn in these following cases:
|
|
cp.exec(cmd); // Sensitive
|
|
cp.execSync(cmd); // Sensitive
|
|
|
|
cp.spawn(cmd, { shell: true }); // Sensitive
|
|
cp.spawnSync(cmd, { shell: true }); // Sensitive
|
|
cp.execFile(cmd, { shell: true }); // Sensitive
|
|
cp.execFileSync(cmd, { shell: true }); // Sensitive
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
----
|
|
const cp = require('child_process');
|
|
|
|
cp.spawnSync("/usr/bin/file.exe", { shell: false }); // Compliant
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
'''
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::comments-and-links.adoc[]
|
|
endif::env-github,rspecator-view[]
|