From 90ae5dcb94a887de648a281733bef371c12a82ca Mon Sep 17 00:00:00 2001
From: Fraser Tweedale <frase@frase.id.au>
Date: Fri, 29 Mar 2019 18:50:02 +1000
Subject: [PATCH] HACKING - add policy to avoid System.Process.Typed

Part of: https://github.com/purebred-mua/purebred/issues/269
---
 HACKING | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/HACKING b/HACKING
index 9ae8b332..41768843 100644
--- a/HACKING
+++ b/HACKING
@@ -27,6 +27,11 @@ communication is the key here rather than hacking away.
   - ``Data.Semigroup.<>`` > ``Data.Monoid.<>`` > ``Data.List.++``
   - and so on...
 
+- For executing subprocesses, use only the functions exported
+  from `Purebred.System.Process`.  This is so that output is
+  tainted, indicating that it must be sanitised before use.
+  (The test suite is excepted from this policy.)
+
 
 ### Style