Rust DoctorSource kernel · Security
rust_doctor::source::dynamic_shell_command
Avoid the shell and pass values as separate Command arguments; otherwise apply shell-specific escaping at the trust boundary.
- Category
- Security
- Default level
- warn
- Tier
- P0
- Producer
- Source kernel
What it reads
Source text, without resolving types or expanding macros.
Tier
Gravest tier: caps the score of its dimension.
The tier bounds how severe a rule may be; its category bounds the tier.Change it
Turn it off, or make it blocking, without touching the code it flags:
rust-doctor --rule rust_doctor::source::dynamic_shell_command=off .
rust-doctor --rule rust_doctor::source::dynamic_shell_command=error .