Potential fix for code scanning alert no. 4: Uncontrolled command line

create-a-container/server.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const bodyParser = require('body-parser');
 const session = require('express-session');
-const { spawn, exec } = require('child_process');
+const { spawn, exec, execFile } = require('child_process');
 const path = require('path');
 const crypto = require('crypto');
 const fs = require('fs'); // Added fs module
@@ -33,25 +33,25 @@
 });
 
 // Handles user login
 app.post('/login', (req, res) => {
     const { username, password } = req.body;
 
-    exec(`node /root/bin/js/runner.js authenticateUser ${username} ${password}`, (err, stdout) => {
+    execFile('node', ['/root/bin/js/runner.js', 'authenticateUser', username, password], (err, stdout) => {
         if (err) {
             console.error("Login script execution error:", err);
             return res.status(500).json({ error: "Server error during authentication." });
         }
 
         if (stdout.trim() === 'true') {
             req.session.user = username;
             req.session.proxmoxUsername = username;
             req.session.proxmoxPassword = password;
             return res.json({ success: true, redirect: '/form.html' });
         } else {
             return res.status(401).json({ error: "Invalid credentials" });
         }
     });
 });
 
 // ✨ UPDATED: API endpoint to get user's containers
 app.get('/api/my-containers', (req, res) => {