qdegraaf
|
6dfc1ccd6f
|
[flake8-bandit ] Implement S502 SslInsecureVersion rule (#9390)
## Summary
Adds S502 rule for the
[flake8-bandit](https://github.com/tylerwince/flake8-bandit) plugin
port.
Checks for calls to any function with keywords arguments `ssl_version`
or `method` or for kwargs `method` in calls to `OpenSSL.SSL.Context` and
`ssl_version` in calls to `ssl.wrap_socket` which have an insecure
ssl_version valu. See also
https://bandit.readthedocs.io/en/latest/_modules/bandit/plugins/insecure_ssl_tls.html#ssl_with_bad_version
## Test Plan
Fixture added
## Issue Link
Refers: https://github.com/astral-sh/ruff/issues/1646
|
2024-01-05 01:27:41 +00:00 |
|