search

LonelyGuy12 / some-random-shit

0 stars 0 forks source link

(BAN-B310) Audit required: Use of an insecure method method from `urllib` detected #13

Open LonelyGuy12 opened 2 years ago

LonelyGuy12 commented 2 years ago

Description

urllib not only opens http:// or https:// URLs, but also ftp:// and file://. With this it might be possible to open local files on the executing machine which might be a security risk if the URL to open can be manipulated by an external user. Correct way:

Occurrences

There are 2 occurrences of this issue in the repository.

See all occurrences on DeepSource → deepsource.io/gh/LonelyGuy12/some-random-shit/issue/BAN-B310/occurrences/

LonelyGuy12 commented 2 years ago

Couldn't find a better way to implement this till yet