Merge branch 'attribution-for-shell-guide' into 'master'

Attribution For Shell Guide
This commit is contained in:
Jacob Vosmaer 2014-03-24 15:10:40 +00:00
commit 1fe07cfbae
1 changed files with 6 additions and 0 deletions

View File

@ -1,5 +1,11 @@
# Guidelines for shell commands in the GitLab codebase
## References
- [Google Ruby Security Reviewer's Guide](https://code.google.com/p/ruby-security/wiki/Guide)
- [OWASP Command Injection](https://www.owasp.org/index.php/Command_Injection)
- [Ruby on Rails Security Guide Command Line Injection](http://guides.rubyonrails.org/security.html#command-line-injection)
## Use File and FileUtils instead of shell commands
Sometimes we invoke basic Unix commands via the shell when there is also a Ruby API for doing it.