This repository has been archived by the owner on Oct 6, 2020. It is now read-only.

DUO104 is used by eval and format string checks #15

Closed

minusworld opened this issue Jul 30, 2019 · 1 comment

Contributor

minusworld commented Jul 30, 2019

It looks like DUO104 is used both for eval and format strings and I am not sure if this is intentional.

https://github.com/duo-labs/dlint/blob/master/dlint/linters/bad_eval_use.py#L20
https://github.com/duo-labs/dlint/blob/master/dlint/linters/format_string.py#L24

Collaborator

mschwager commented Jul 31, 2019

Good catch! The format string check was an experiment of mine - I'll remove it until something more concrete is created (if at all).

mschwager closed this as completed in

1fd373d

mschwager added a commit that referenced this issue


          Fix #15, crash in ReDoS detection when malformed regular expression

4f5a9b6

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.