hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

adjust qhelp to focus on the execFile API

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-05-18 12:22:46 +02:00
parent 9c294513c7
commit d18808698a
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.qhelp
View File

@@ -21,9 +21,9 @@
<recommendation>
<p>
If possible, use hard-coded string literals to specify the
shell command to run, and provide the dynamic arguments to the shell
command separately to avoid interpretation by the shell.
If possible, provide the dynamic arguments to the shell as an array
using e.g. the <code>child_process.execFile</code> API to avoid
interpretation by the shell.
</p>
<p>