วิธีที่ไม่ถูกต้องในการรับข้อมูลจากผู้ใช้ใน Python (และทางเลือกที่ปลอดภัยกว่า)

  # ⚠️ Educational example only — not functional  name = input("Enter username: ")  simulate_process(name)  # Simulated for demonstration          

  import argparse  parser = argparse.ArgumentParser()  parser.add_argument("--username", type=str)  args = parser.parse_args()  process(args.username)  # Validated by argparse          

  # ⚠️ Educational example only — not functional  age = input("Enter your age: ")          

  from pydantic import BaseModel, ValidationError    class UserInput(BaseModel):      age: int    try:      data = UserInput(age=int(input("Enter your age: ")))  except ValidationError as e:      print("Invalid input:", e)          

  # Missing automated checks allows  # unsafe input patterns to slip in  # during reviews/merges.          

  jobs:    security_scan:      runs-on: ubuntu-latest      steps:        - uses: actions/checkout@v3        - name: Run Xygeni Scan          run: xygeni scan \            --rules detect-unsafe-input \            --fail-on-findings