31 lines
638 B
Plaintext
31 lines
638 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
const cp = require('child_process');
|
|
|
|
// A shell will be spawn in these following cases:
|
|
cp.exec(cmd); // Sensitive
|
|
cp.execSync(cmd); // Sensitive
|
|
|
|
cp.spawn(cmd, { shell: true }); // Sensitive
|
|
cp.spawnSync(cmd, { shell: true }); // Sensitive
|
|
cp.execFile(cmd, { shell: true }); // Sensitive
|
|
cp.execFileSync(cmd, { shell: true }); // Sensitive
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
----
|
|
const cp = require('child_process');
|
|
|
|
cp.spawnSync("/usr/bin/file.exe", { shell: false }); // Compliant
|
|
----
|
|
|
|
include::../see.adoc[]
|