rspec/rules/S5883/common/fix/introduction.adoc
2023-03-02 18:07:54 +01:00

8 lines
292 B
Plaintext

Allowing users to insert data in operating system commands generally creates
more problems than it solves.
Anything that can be done via operating system commands can usually be done via a
language's native SDK. +
Therefore, our suggestion is to avoid using OS commands in the first place.