search

fsprojects / FAKE

FAKE - F# Make
https://fake.build
Other
1.28k stars 582 forks source link

Documentation - Shell Command sanitized? #2696

Open ShalokShalom opened 1 year ago

ShalokShalom commented 1 year ago

Description

I wonder if the ShellCommand and RawCommand runners are safe.

Repro steps

Please provide the steps required to reproduce the problem

  1. visit documentation at https://fake.build/apidocs/v5/fake-core-command.html

  2. Wonder, whatever or not, both APIs provide a sanitized interface.

Expected behavior

ShellCommand (which is probably unsafe) being described as vulnerable to malicious user code.

RawCommand (which is probably safe) being described as sanitized.

Actual behavior

No mention of security at all.