Security Issue: Command injection

来源:互联网 发布:八维研修学院java课程 编辑:程序博客网 时间:2024/05/18 01:28

CERT C Coding Standard

https://www.securecoding.cert.org/confluence/pages/viewpage.action?pageId=2130132 

Basically:

1.  If we can call a library, it is better to call a library instead of the shell2. Replace calls to popen with execv
0 0
原创粉丝点击