CodeQL library for Python
codeql/python-all 0.10.5 ( changelog , source )
Search

Predicate UnsafeShellCommandConstruction :: isUsedAsShellCommand

Holds if the string constructed at source is executed at shellExec

Import path

import semmle.python.security.dataflow.UnsafeShellCommandConstructionCustomizations
predicate isUsedAsShellCommand ( Node source , SystemCommandExecution shellExec )