hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
047ea10a9aa7ab945fe2b2d03f70fd84ee7bfa3e
codeql/go/old-change-notes/2021-01-08-git-as-interpreter.md
Chuan-kai Lin aa514fff32 codeql-go merge prep: move into go/ directory
2022-05-20 10:07:19 -07:00

325 B
Raw Blame History

lgtm,codescanning

  • Added git as a potentially-exploitable command interpreter for the purposes of the go/command-injection query. Because some of its options can cause it to execute an arbitrary command, unsanitized user data can be dangerous to include in its argument list. Such cases will now be flagged as an alert.