search

MeAmAnUsername / pie

Pipelines for Interactive Environments
Apache License 2.0
0 stars 0 forks source link

Security: escape before `exec` calls #252

Open MeAmAnUsername opened 2 years ago

MeAmAnUsername commented 2 years ago

PIE is for pipelines, which will likely involve calling exec sometimes. Such calls can benefit from security to make sure arguments are escaped correctly. How to do this?

  1. Provide an exec library function which does this
  2. Somehow detect functions that leave the Java boundary and require that their input is escaped?