codeql/shell-command-injection-from-environment.js at 1c79ec550eb2193708178029fa787a6c8defd07e - codeql - Gitea: Git with a cup of tea

hohn/codeql

mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00

Files

Esben Sparre Andreasen 5a983cb535 JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00

7 lines

169 B

JavaScript

Raw Blame History

 var cp = require("child_process"),
   path = require("path");
 function cleanupTemp() {
   let cmd = "rm -rf " + path.join(__dirname, "temp");
   cp.execSync(cmd); // BAD
 }