mirror of
https://github.com/astral-sh/ruff.git
synced 2025-10-01 14:21:53 +00:00
85e71ba91a
## Summary A follow up PR on https://github.com/astral-sh/ruff/issues/14991 Ruff ignores hardcoded passwords for typed variables. Add a rule to catch passwords in typed code bases ## Test Plan Includes 2 more test typed variables
79 lines
1.3 KiB
Python
79 lines
1.3 KiB
Python
d = {}
|
|
|
|
# OK
|
|
safe = "s3cr3t"
|
|
password = True
|
|
password = safe
|
|
password = ""
|
|
password is True
|
|
password == 1
|
|
d["safe"] = "s3cr3t"
|
|
|
|
# Errors
|
|
password = "s3cr3t"
|
|
_pass = "s3cr3t"
|
|
passwd = "s3cr3t"
|
|
pwd = "s3cr3t"
|
|
secret = "s3cr3t"
|
|
token = "s3cr3t"
|
|
secrete = "s3cr3t"
|
|
safe = password = "s3cr3t"
|
|
password = safe = "s3cr3t"
|
|
PASSWORD = "s3cr3t"
|
|
PassWord = "s3cr3t"
|
|
password: str = "s3cr3t"
|
|
password: Final = "s3cr3t"
|
|
|
|
d["password"] = "s3cr3t"
|
|
d["pass"] = "s3cr3t"
|
|
d["passwd"] = "s3cr3t"
|
|
d["pwd"] = "s3cr3t"
|
|
d["secret"] = "s3cr3t"
|
|
d["token"] = "s3cr3t"
|
|
d["secrete"] = "s3cr3t"
|
|
safe = d["password"] = "s3cr3t"
|
|
d["password"] = safe = "s3cr3t"
|
|
|
|
|
|
class MyClass:
|
|
password = "s3cr3t"
|
|
safe = password
|
|
|
|
|
|
MyClass.password = "s3cr3t"
|
|
MyClass._pass = "s3cr3t"
|
|
MyClass.passwd = "s3cr3t"
|
|
MyClass.pwd = "s3cr3t"
|
|
MyClass.secret = "s3cr3t"
|
|
MyClass.token = "s3cr3t"
|
|
MyClass.secrete = "s3cr3t"
|
|
|
|
password == "s3cr3t"
|
|
_pass == "s3cr3t"
|
|
passwd == "s3cr3t"
|
|
pwd == "s3cr3t"
|
|
secret == "s3cr3t"
|
|
token == "s3cr3t"
|
|
secrete == "s3cr3t"
|
|
password == safe == "s3cr3t"
|
|
|
|
if token == "1\n2":
|
|
pass
|
|
|
|
if token == "3\t4":
|
|
pass
|
|
|
|
if token == "5\r6":
|
|
pass
|
|
|
|
|
|
# These should not be flagged
|
|
passed_msg = "You have passed!"
|
|
compassion = "Please don't match!"
|
|
impassable = "You shall not pass!"
|
|
passwords = ""
|
|
PASSWORDS = ""
|
|
passphrases = ""
|
|
PassPhrases = ""
|
|
tokens = ""
|
|
secrets = ""
|