mirror of
https://github.com/github/codeql.git
synced 2026-04-27 01:35:13 +02:00
Update javascript/ql/src/Security/CWE-078/IndirectCommandInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
@@ -35,10 +35,10 @@
|
||||
|
||||
<p>
|
||||
|
||||
<p>If given arguments as a single string, avoid simply splitting the string on
|
||||
If given arguments as a single string, avoid simply splitting the string on
|
||||
whitespace. Arguments may contain quoted whitespace, causing them to split into
|
||||
multiple arguments. Use a library like <code>shell-quote</code> to parse the string
|
||||
into an array of arguments instead.</p>
|
||||
into an array of arguments instead.
|
||||
|
||||
</p>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user