Glossary: Web App Security and Authentication

Command injection

User text passed to a shell command so that it runs as instructions. Use execFile, which runs no shell, instead of building command strings.