Unverified50% confidenceSolutionExact time
Developers should disable dangerous PHP functions such as exec, system, and passthru unless business needs require them.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedLinux的seccomp可以白名单方式限制进程可调用的系统调用集合，例如禁止AI进程使用execve或socket等高危调用64% similarUnverifiedWhen restricted mode is enabled, Claude Code removes all built-in tools capable of executing commands or code, disables WebFetch (unless explicitly specified in --tools), retains only file operation tools within the working directory, rejects bypassPermissions privilege escalation, and ignores user, project, and local settings files.63% similarUnverifiedPlimsoll allows developers to execute untrusted code in a controlled, isolated environment without affecting the host machine or production environment.63% similarUnverifiedpledge is used to restrict the categories of system calls a process can invoke, while unveil restricts the file system paths visible to a process.62% similarUnverified使用--ignore-scripts参数可禁止安装过程中自动执行lifecycle脚本，但会破坏部分依赖原生编译的包的正常安装62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1084795API
curl https://kongchang.com/api/v1/knowledge/claims/1084795MCP
get_claim(id=1084795)