steelbrain / steelbrain/node-ssh
Command injection using execcommand
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 1k
- Forks
- 94
- PR merge metrics
- No merged PRs in 30d
Description
Hi
Can anyone help me
I need to connect to a remote unix server using my node js app, and execute a shell script file present in the unix server. I am using ssh.execCommand to perform this operation.
However i was wondering is it similar to using spawn /Execfile which much safer than the exec() command.
Can someone suggest me how to use this in order to prevent command injection.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names ssh.execCommand but no repository file or test. Start by locating its implementation and existing command-execution tests, then determine the expected safe behavior and add coverage for the reported command-injection concern; the issue does not define a concrete completion criterion.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- nodejs, typescript
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100