Security · interview question
A teammate submits shaky safe subprocess calls code. Which review comment is the strongest?
Multiple choiceMediumchapter-17-curatedpremiumsecuritysafe-subprocess-calls
Answer and explanation
Correct answer
D. Make the rule clearer and easier to explain. Call subprocesses with explicit argument lists and clear error handling instead of shell-interpolated strings.
Why
The best review comment anchors the change to readability, correctness, and future maintenance. String-built shell commands invite injection and make quoting bugs harder to reason about.
Test yourself on Security
A free test with instant, explained results. No account needed.
More Security questions
- What is the healthiest performance judgment around secrets management?
- What is the clearest sign that code around secrets management should be refactored?
- Which boundary choice best fits log redaction in a maintainable Python system?
- If input validation fails in production, what handling philosophy is strongest?
- Which response shows the healthiest evidence-first mindset around input validation?
- When is log redaction being used in the wrong way?