0
0
mirror of https://github.com/nodejs/node.git synced 2024-11-29 15:06:33 +01:00
nodejs/doc
Matthew Garrett f60aba2fd4 doc: warn about unvalidated input in child_process
child_process.exec*() and child_process.spawn*() (if options.shell is
true) allow trivial arbitrary command execution if code passes
unsanitised user input to it. Add warnings in the docs to make that
clear.

PR-URL: https://github.com/nodejs/node/pull/10466
Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com>
Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2016-12-30 09:26:30 -08:00
..
api doc: warn about unvalidated input in child_process 2016-12-30 09:26:30 -08:00
api_assets doc: fix <code> inside stability boxes 2016-11-22 19:40:02 +01:00
changelogs 2016-12-21 Version 0.12.18 (Maintenance) Release 2016-12-22 01:50:07 +11:00
guides doc: use "Node.js" in V8 guide 2016-12-27 13:30:18 -08:00
topics doc: minor fixes event-loop-timers-and-nexttick.md 2016-11-24 15:48:27 -05:00
full-white-stripe.jpg
node.1 src/doc: improve man page and --help 2016-12-23 00:16:28 +01:00
onboarding-extras.md doc: standardizing on make -j4 2016-12-09 15:53:20 -05:00
onboarding.md doc: require two-factor authentication 2016-12-30 08:56:17 -08:00
osx_installer_logo.png
releases.md doc: add commit formats for release blog posts 2016-09-27 18:16:24 -04:00
template.html doctool: improve the title of pages in doc 2016-08-04 12:17:58 -07:00
thin-white-stripe.jpg