mirror of
https://github.com/nodejs/node.git
synced 2024-11-29 15:06:33 +01:00
f60aba2fd4
child_process.exec*() and child_process.spawn*() (if options.shell is true) allow trivial arbitrary command execution if code passes unsanitised user input to it. Add warnings in the docs to make that clear. PR-URL: https://github.com/nodejs/node/pull/10466 Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com> Reviewed-By: Sam Roberts <vieuxtech@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> |
||
---|---|---|
.. | ||
api | ||
api_assets | ||
changelogs | ||
guides | ||
topics | ||
full-white-stripe.jpg | ||
node.1 | ||
onboarding-extras.md | ||
onboarding.md | ||
osx_installer_logo.png | ||
releases.md | ||
template.html | ||
thin-white-stripe.jpg |