mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
3 lines
325 B
Markdown
3 lines
325 B
Markdown
lgtm,codescanning
|
|
* Added `git` as a potentially-exploitable command interpreter for the purposes of the `go/command-injection` query. Because some of its options can cause it to execute an arbitrary command, unsanitized user data can be dangerous to include in its argument list. Such cases will now be flagged as an alert.
|