Prevention and Mitigation Practices CWE
Note that proper output encoding, escaping, and quoting is the most effective solution
for preventing OS command injection, although input validation may provide some
defense-in-depth. This is because it effectively limits what will appear in output.