aws-solutions / media-services-application-mapper

Media Services Application Mapper is a browser-based tool that allows operators to visualize the structure and logical connections among AWS Media Services and supporting services in the cloud. The tool can be used as a top-down resource monitoring tool when integrated with CloudWatch.
Apache License 2.0
84 stars 27 forks source link

Fix bandit issues found with hawkeye scanner #195

Closed JimTharioAmazon closed 3 years ago

JimTharioAmazon commented 3 years ago

python-bandit medium ./msam/chalicelib/nodes.py lines 227 blacklist B303 Use of insecure MD2, MD4, MD5, or SHA1 hash function. Review the file and fix the issue.

python-bandit medium ./msam/chalicelib/periodic.py lines 299 blacklist B314 Using xml.etree.ElementTree.fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.fromstring with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called Review the file and fix the issue.

python-bandit medium ./msam/chalicelib/periodic.py lines 310 blacklist B314 Using xml.etree.ElementTree.fromstring to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.fromstring with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called Review the file and fix the issue.