Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.6.3 (changelog, source)

Predicate UnsafeShellCommandConstruction::executesArrayAsShell

Holds if the arguments array given to sys is joined as a string because shell is set to true.

Import path

import semmle.javascript.security.dataflow.UnsafeShellCommandConstructionCustomizations
predicate executesArrayAsShell(SystemCommandExecution sys)