openstack
/
bandit
Code Issues Proposed changes

Fix some errors in utils.py & calls.py 

Change-Id: I9da07469816eef4a1e2a48235437935e38ff3af4
This commit is contained in:
zhangyanxian 2016-08-09 05:46:27 +00:00
parent bfa759781c
commit d4b99165c3
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
bandit/blacklists/calls.py
View File

@ -251,7 +251,7 @@ to XML attacks. Methods should be replaced with their defusedxml equivalents.
B321: ftplib
------------
FTP-related funtions are being called. FTP is considered insecure. Use
FTP-related functions are being called. FTP is considered insecure. Use
SSH/SFTP/SCP or some other encrypted protocol.
+------+---------------------+------------------------------------+-----------+
@ -386,7 +386,7 @@ def gen_blacklist():
sets.append(utils.build_conf_dict(
'telnetlib', 'B312', ['telnetlib.*'],
'Telnet-related funtions are being called. Telnet is considered '
'Telnet-related functions are being called. Telnet is considered '
'insecure. Use SSH or some other encrypted protocol.',
'HIGH'
))
@ -465,7 +465,7 @@ def gen_blacklist():
sets.append(utils.build_conf_dict(
'ftplib', 'B321', ['ftplib.*'],
'FTP-related funtions are being called. FTP is considered '
'FTP-related functions are being called. FTP is considered '
'insecure. Use SSH/SFTP/SCP or some other encrypted protocol.',
'HIGH'
))

2
bandit/core/utils.py
View File

@ -248,7 +248,7 @@ def concat_string(node, stop=None):
'''Builds a string from a ast.BinOp chain.
This will build a string from a series of ast.Str nodes wrapped in
ast.BinOp nodes. Somthing like "a" + "b" + "c" or "a %s" % val etc.
ast.BinOp nodes. Something like "a" + "b" + "c" or "a %s" % val etc.
The provided node can be any participant in the BinOp chain.
:param node: (ast.Str or ast.BinOp) The node to process