Skip to content

Files

Latest commit

 

History

History
31 lines (23 loc) · 993 Bytes

B310.md

File metadata and controls

31 lines (23 loc) · 993 Bytes

Pattern: Use of url open function

Issue: -

Description

Audit url open for permitted schemes. Allowing use of file: or custom schemes is often unexpected.

This rule checks for the following calls:

  • urllib.urlopen
  • urllib.request.urlopen
  • urllib.urlretrieve
  • urllib.request.urlretrieve
  • urllib.URLopener
  • urllib.request.URLopener
  • urllib.FancyURLopener
  • urllib.request.FancyURLopener
  • urllib2.urlopen
  • urllib2.Request
  • six.moves.urllib.request.urlopen
  • six.moves.urllib.request.urlretrieve
  • six.moves.urllib.request.URLopener
  • six.moves.urllib.request.FancyURLopener

The Requests package is recommended for a higher-level HTTP client interface.

Further Reading