"We've found 99,841 code results"
Someone should write a script that automatically raises an issues for each line and each project, it's probably possible, but I'm chronically lazy.
Someone should write a script that automatically raises an issues for each line and each project, it's probably possible, but I'm chronically lazy.
And to be clear, I'm talking about providing at least one legit use for passing user input directly to exec without any kind of filtering...
He deliberately wrote vulnerable code to test his auditing script. There are more repos like this.
Instead of half-assing the problem, please dedicate 10 minute of your life to look in, analyze & report one or two of the problems you find.
Also explain why you think this is an security issue.
You will:
* help someone out by pointing out an issue
* hopefully educate the person how to write better code
* educate yourself in reading and understanding others spaghetti code