An application builds an operating-system command by concatenating a supplied filename. A safe approved proof shows that input changes the command's structure. What is the weakness?

1. A certificate chain error
2. Password spraying
3. DNS cache poisoning
4. OS command injection