Make subprocess invocation safer

project-receptor / python-receptor

Project Receptor is a flexible multi-service relayer with remote execution and orchestration capabilities linking controllers with executors across a mesh of nodes.

Other

32 stars 21 forks source link

Make subprocess invocation safer #108

Closed Ichimonji10 closed 4 years ago

Ichimonji10 commented 4 years ago

This is NOT SAFE:

subprocess.Popen('echo foo&rm -rf /').wait()

This is safe:

subprocess.Popen(('echo', 'foo&rm -rf /')).wait()

Ichimonji10 commented 4 years ago

Obviated by #111.