feat(ban): Add rule to ban shell execution via backticks

ekino · Feb 25, 2022 · 7c55867 · 7c55867
1 parent 5416d33
commit 7c55867
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/extension.neon b/extension.neon
@@ -41,6 +41,11 @@ parameters:
 					- system
 					- var_dump
 
+			# enable detection of shell execution by backticks
+			-
+				type: Expr_ShellExec
+				functions: null
+
 		# enable detection of `use Tests\Foo\Bar` in a non-test file
 		use_from_tests: true