シェルスクリプトã¨ã®å¯¾æ¯”ã§ç†è§£ã™ã‚‹Pythonã®subprocess - æœæ—¥ãƒãƒƒãƒˆã€€æŠ€è¡“者ブãƒã‚°ã¯ã˜ã‚㫠開発部㮠ikasat ã§ã™ã€‚ 皆ã•ã‚“㯠git, ssh, rsync ã®ã‚ˆã†ãªå¤–部コマンドを呼ã³å‡ºã™ã‚¹ã‚¯ãƒªãƒ—トを書ããŸããªã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ 個人的ã«ã“ã®é¡žã®ã‚¹ã‚¯ãƒªãƒ—トã¯æœ€åˆã¯ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—トã¨ã—ã¦æ›¸ãã®ã§ã™ãŒã€æ”¹ä¿®ã‚’é‡ãã‚‹ã†ã¡ã«è‚¥å¤§åŒ–ã—ã¦å‡¦ç†ã‚‚複雑ã«ãªã‚Šã€ 後ã‹ã‚‰ Python ã®ã‚ˆã†ãªæ±Žç”¨ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã§æ›¸ãç›´ã™ã“ã¨ãŒã‚ˆãã‚ã‚Šã¾ã™ã€‚ 外部コマンド呼ã³å‡ºã—を書ãç›´ã™éš›ã«ã€Git æ“作ã®ãŸã‚ã« pygit2〠SSH 接続ã®ãŸã‚ã« paramiko ã®ã‚ˆã†ãªãƒ©ã‚¤ãƒ–ラリをã‚ã–ã‚ã–使ã†ã®ã¯å¤§ãŒã‹ã‚Šã ã£ãŸã‚Šã€ rsync ã«ç›¸å½“ã™ã‚‹ã‚ˆã†ãªã“ãªã‚ŒãŸãƒ©ã‚¤ãƒ–ラリãŒå˜åœ¨ã—ãªã‹ã£ãŸã‚Šã™ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ãã®ã‚ˆã†ãªæ™‚ã¯æ¨™æº–ライブラリ㮠subprocess モジュールを利用ã—ã€Python ã‹ã‚‰å¤–部コマンドを呼ã³å‡ºã™ã“ã¨ã«ãªã‚‹ã§ã—ょã†ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€Python ã®ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ãƒš
Sanitized input for subprocess with shell=True in python
10 common security gotchas in Python and how to avoid them | HackerNoon
Digging for Security Bugs in Python Code
Python's os and subprocess Popen Commands
{{#tags}}- {{label}}
{{/tags}}