-
Notifications
You must be signed in to change notification settings - Fork 163
adding CWE-459 #893
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
adding CWE-459 #893
Conversation
Signed-off-by: ewlxdnx <dean.wiley@ericsson.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Threw in a few extra bits about why "tempfile.mkstemp()" requires manual cleanup, and fixed a few minor bits. Happy with it besides that.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The code looks good. I have added some cosmetic suggestions. Apart from that, I agree with comments from @BartKaras1128.
Since I can't push change for pull requests of other contributors and didn't want to spam suggestions, I wanted to point out that the names of the modules, methods, etc. should be surrounded by backticks. That is the case in the internal confluence page but here these elements lack them.
Co-authored-by: Bartlomiej Karas <moezarts@gmail.com> Signed-off-by: dwiley258 <wileydean@gmail.com>
Co-authored-by: Bartlomiej Karas <moezarts@gmail.com> Co-authored-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com> Signed-off-by: dwiley258 <wileydean@gmail.com>
I've added the suggested changes to the review |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added a few more suggestions because there were still some backticks missing and I was getting linter warnings in the .py files
docs/Secure-Coding-Guide-for-Python/CWE-664/CWE-459/compliant01.py
Outdated
Show resolved
Hide resolved
docs/Secure-Coding-Guide-for-Python/CWE-664/CWE-459/noncompliant01.py
Outdated
Show resolved
Hide resolved
docs/Secure-Coding-Guide-for-Python/CWE-664/CWE-459/noncompliant02.py
Outdated
Show resolved
Hide resolved
Co-authored-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com> Signed-off-by: dwiley258 <wileydean@gmail.com>
…1.py Co-authored-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com> Signed-off-by: dwiley258 <wileydean@gmail.com>
…nt01.py Co-authored-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com> Signed-off-by: dwiley258 <wileydean@gmail.com>
…nt02.py Co-authored-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com> Signed-off-by: dwiley258 <wileydean@gmail.com>
all comments have been addressed |
No description provided.