CodeQL library for Python
codeql/python-all 0.11.13 (changelog, source)
Search

Predicate UnsafeShellCommandConstruction::isUsedAsShellCommand

Holds if the string constructed at source is executed at shellExec

Import path

import semmle.python.security.dataflow.UnsafeShellCommandConstructionCustomizations
predicate isUsedAsShellCommand(Node source, SystemCommandExecution shellExec)