ENV04-C: Do not call system() if you do not need a command processor
STR02-C: Sanitize data passed to complex subsystems
IDS07-J: Do not pass untrusted, unsanitized data to the Runtime.exec() method
STR02-CPP: Sanitize data passed to complex subsystems