hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Use synchronous APIs in examples for js/shell-command-constructed-from-input.

Browse Source
This commit is contained in:
Max Schaefer
2023-05-12 14:42:11 +01:00
committed by GitHub
parent d27f84e34e
commit 2e7eb50319
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-078/examples/unsafe-shell-command-construction.js
View File

@@ -1,5 +1,5 @@
var cp = require("child_process");
module.exports = function download(path, callback) {
cp.exec("wget " + path, callback);
cp.execSync("wget " + path, callback);
}

2
javascript/ql/src/Security/CWE-078/examples/unsafe-shell-command-construction_fixed.js
View File

@@ -1,5 +1,5 @@
var cp = require("child_process");
module.exports = function download(path, callback) {
cp.execFile("wget", [path], callback);
cp.execFileSync("wget", [path], callback);
}