Skip to content

task providers should update use of os:cmd/1,2 to open_port/2 #64

@UncleGrumpy

Description

@UncleGrumpy

For safety, and the ability to obtain the exit status of external commands, the use of os:cmd/1,2 should be replaced with open_port({spawn_executable, Cmd}, Args).

For more info on why this is recommended see: https://security.erlef.org/secure_coding_and_deployment_hardening/external_executables.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions