rspec/rules/S1523/python/rule.adoc
2020-06-30 17:16:12 +02:00

28 lines
471 B
Plaintext

include::../description.adoc[]
include::../ask-yourself.adoc[]
include::../recommended.adoc[]
== Sensitive Code Example
----
import os
value = input()
command = 'os.system("%s")' % value
def evaluate(command, file, mode):
eval(command) # Sensitive.
eval(command) # Sensitive. Dynamic code
def execute(code, file, mode):
exec(code) # Sensitive.
exec(compile(code, file, mode)) # Sensitive.
exec(command) # Sensitive.
----
include::../see.adoc[]