← Rule catalog

rust-doctor · Security

`command-shell-interpolation`

Detect dynamic input passed through a command shell

Severity: warning
Confidence: medium
Analyzer: syn-ast
Default policy: Opt-in

Tags

heuristic
security

Framework requirements

No framework requirement.

Limitations

Syntactic analysis does not have rustc name resolution or inferred type information.

Remediation

Invoke the program directly and pass untrusted values as individual arguments.

Fix capability: guidance