963bdd9983
pipe lookup plugin uses Popen with shell=True intentionally.
This is considered a security issue if user input is not validated.
Updated docs to reflect this information for the user. Also, added
Bandit B602 documentation link for further reading.
Fixes: #70159
Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>
(cherry picked from commit
|
||
---|---|---|
.. | ||
fragments | ||
CHANGELOG-v2.10.rst | ||
CHANGELOG.rst | ||
changelog.yaml | ||
config.yaml |