If at all possible, use library calls rather than external processes to recreate the desired
functionality.
For any data that will be used to generate a command to be executed, keep as much of
that data out of external control as possible. For example, in web applications, this may