hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
aa514fff32c25b580fe9c53f9f0c59374ede3b47
codeql/go/old-change-notes/2021-01-08-git-as-interpreter.md
Chuan-kai Lin aa514fff32 codeql-go merge prep: move into go/ directory
2022-05-20 10:07:19 -07:00

325 B
Raw Blame History

lgtm,codescanning

  • Added git as a potentially-exploitable command interpreter for the purposes of the go/command-injection query. Because some of its options can cause it to execute an arbitrary command, unsanitized user data can be dangerous to include in its argument list. Such cases will now be flagged as an alert.