Skip to content

[SECURITY] Implement Input Sanitization for Command Execution #5

@KyxCy98

Description

@KyxCy98

The application was vulnerable to command injection because user input was passed directly to std::system().

Introduced a safe()/secureInput() validation function.

Implemented a blacklist for dangerous shell characters (e.g., ;, &, |, `).

Ensured that any target input is strictly validated before being appended to system commands.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions