openstack
/
bandit
Code Issues Proposed changes

Merge "HTTPSConnection is secure in newer Python"

This commit is contained in:
Jenkins 2017-03-02 09:27:57 +00:00 committed by Gerrit Code Review
parent 7b3e43d0c9 c924b2b12f
commit 049a6774bd
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
bandit/blacklists/calls.py
View File

@ -138,8 +138,8 @@ be reviewed.
B309: httpsconnection
---------------------
Use of HTTPSConnection does not provide security, see
https://wiki.openstack.org/wiki/OSSN/OSSN-0033
Use of HTTPSConnection on older versions of Python prior to 2.7.9 and 3.4.3 do
not provide security, see https://wiki.openstack.org/wiki/OSSN/OSSN-0033
+------+---------------------+------------------------------------+-----------+
| ID | Name | Calls | Severity |
@ -373,7 +373,8 @@ def gen_blacklist():
['httplib.HTTPSConnection',
'http.client.HTTPSConnection',
'six.moves.http_client.HTTPSConnection'],
'Use of HTTPSConnection does not provide security, see '
'Use of HTTPSConnection on older versions of Python prior to 2.7.9 '
'and 3.4.3 do not provide security, see '
'https://wiki.openstack.org/wiki/OSSN/OSSN-0033'
))