Shell escape 
| ID | SECURITY-2 |
| Title | Do not use the shell escape function. |
| Priority | Mandatory |
| Severity level | 3 |
| Description | Do not use the shell escape function. If necessary, use the system function instead. |
| Rationale | When using the !program_to_execute syntax to execute external programs, no dynamic input or program names can be used. |
| Exception | Application development. |
Avoid:
!mycommand
Instead use:
system('mycommand')