subprocess

Security & Secrets · 1 min read · 2025-12-04

shell=False Is a Small Setting with a Large Security Boundary

Passing an argument array directly to exec avoids an entire class of shell expansion and injection behavior.