Potential fix for code scanning alert no. 4: Uncontrolled command line

[horner]

Potential fix for https://github.com/mieweb/opensource-server/security/code-scanning/4

The best way to fix this vulnerability is to avoid shell interpolation entirely and instead use an API such as spawn or execFile that takes command arguments as an array, so no shell parsing occurs. This prevents command injection regardless of username/password content.

• Replace the use of exec with spawn (or execFile), passing the command and its arguments as separate items in an array.
• Capture the output and error events to preserve the current behavior (send response based on child output).
• No additional functionality is needed; only the command execution method in /login route handler should be updated.

Required changes:

• In create-a-container/server.js, line 39: Replace exec with a safe alternative, modifying how output is handled.
• Potentially add error capturing for spawn/execFile.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[runleveldev]

Obseleted by #48