Confirmed users
971
edits
Python Static Code Analysis: Difference between revisions
Jump to navigation
Jump to search
→Low Hanging Fruit
| Line 21: | Line 21: | ||
* Detect references to internal hostnames or staging environments | * Detect references to internal hostnames or staging environments | ||
* Detect calls to Python libraries/functions that are considered dangerous in web applications. Like for example Popen() or system() | * Detect calls to Python libraries/functions that are considered dangerous in web applications. Like for example Popen() or system() | ||
* Detect file system access. | |||
* Detect HTTP calls to internal or external web services. Make sure the URLs used for those calls are properly escaped. (String concatenation / manual building vs using for example requests.put(url,params)) | |||
=== More Complicated === | === More Complicated === | ||