Improve CommandLiteralInjection

[dentarg]

The suggestion from CommandLiteralInjection isn't great, just switching from the backtick method to system does not make what ever you are doing safe. https://ruby-doc.org/3.3.0/command_injection_rdoc.html

rubocop-eighty-four-codes/lib/rubocop/cop/eighty_four_codes/command_literal_injection.rb

Lines 3 to 19 in c5a1f07

	module EightyFourCodes
	# Check for use of `/bin/ls #{params[:file]}` and %x(/bin/ls #{params[:file]})
	#
	# Passing user input to `` and %x without sanitization and parameterization can result in command injection
	#
	# @example
	#
	# # bad
	# %x(/bin/ls #{filename})
	#
	# # good (parameters)
	# system("/bin/ls", filename)
	# # even better
	# exec("/bin/ls", shell_escape(filename))
	#
	class CommandLiteralInjection < RuboCop::Cop::Cop
	MSG = 'Do not include variables command literals. Use parameters "system(cmd, params)" or exec() instead'.freeze

[dentarg]

Also, backtick method, system and exec all have pretty different behaviour.

• https://ruby-doc.org/3.3.0/Kernel.html#method-i-60
• https://ruby-doc.org/3.3.0/Kernel.html#method-i-system
• https://ruby-doc.org/3.3.0/Kernel.html#method-i-exec