Module implementing a check for shell injection.
| fullPathMatchRe |
| None |
| _evaluateShellCall | Function to determine the severity of a shell call. |
| checkOtherFunctionWithShell | Function to check for any function with shell equals true. |
| checkStartProcessWithNoShell | Function to check for starting a process with no shell. |
| checkStartProcessWithPartialPath | Function to check for starting a process with no shell. |
| checkStartProcessWithShell | Function to check for starting a process with a shell. |
| checkSubprocessPopenWithShell | Function to check for use of popen with shell equals true. |
| checkSubprocessPopenWithoutShell | Function to check for use of popen without shell equals true. |
| getChecks | Public method to get a dictionary with checks handled by this module. |
| hasShell | Function to check, if the node of the context contains the shell keyword. |
Function to determine the severity of a shell call.
Function to check for any function with shell equals true.
Function to check for starting a process with no shell.
Function to check for starting a process with no shell.
Function to check for starting a process with a shell.
Function to check for use of popen with shell equals true.
Function to check for use of popen without shell equals true.
Public method to get a dictionary with checks handled by this module.
Function to check, if the node of the context contains the shell keyword.