Glossary: Endpoint, Application and Email Security

command injection

Also written: shell=True

An attack where user text reaches a shell command, so input such as '; rm -rf /' runs as a second command. Bandit flags subprocess calls that use shell=True for this reason.