aiolabs/lnbits
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

[fix] bandit sql warnings (#3242)

Browse source
This commit is contained in:
Vlad Stan 2025-07-05 12:12:47 +03:00 • committed by dni ⚡
parent e0749e186e
commit 76ecf113c3
No known key found for this signature in database
GPG key ID: D1F416F29AD26E87
8 changed files with 99 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

7
pyproject.toml
View file

@ -221,10 +221,10 @@ classmethod-decorators = [
# S602 `subprocess` call with `shell=True` identified, security issue
# S603 `subprocess` call: check for execution of untrusted input
# S607: Starting a process with a partial executable path
# TODO: do not skip S608:
# S608: Possible SQL injection vector through string-based query construction
# S324 Probable use of insecure hash functions in `hashlib`: `md5`
"lnbits/*" = ["S101", "S608"]
# TODO: remove S101 ignore
"lnbits/*" = ["S101"]
"lnbits/core/views/admin_api.py" = ["S602", "S603", "S607"]
"crypto.py" = ["S324"]
"test*.py" = ["S101", "S105", "S106", "S307"]
@ -232,9 +232,6 @@ classmethod-decorators = [
"tests/*" = ["S311"]
"tests/regtest/helpers.py" = ["S603"]
[tool.bandit]
skips = ["B101", "B404"]
[tool.ruff.lint.mccabe]
max-complexity = 10