-
Notifications
You must be signed in to change notification settings - Fork 70
Open
Description
Hello
I want to execute this command :
Set-Clipboard -Value "Content here"
My issue is that doing something like that :
const command = PowerShell.command(['Set-Clipboard -Value ', `"${content}"`]);This is a vulnerability because if I execute this command with this content, for example : "Hello World\"; explorer.exe / \""
It will start the explorer.exe process
How can I avoid this kind of issue? Or how can I sanitize the content before executing the command?
The documentation link seems to be broken :/
fvilante
Metadata
Metadata
Assignees
Labels
No labels