Commit Graph

1 Commits (c39753d7ad25a80cb3964a169a9c3cd0fe1f67ee)

Author SHA1 Message Date
Abhijeet Kasurde 963bdd9983
[2.10] pipe: update docs for Popen with shell=True usage (#70602)
pipe lookup plugin uses Popen with shell=True intentionally.
This is considered a security issue if user input is not validated.
Updated docs to reflect this information for the user. Also, added
Bandit B602 documentation link for further reading.

Fixes: #70159

Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>
(cherry picked from commit e5649ca3e8)
4 years ago