72 "S202.3": QCoreApplication.translate( |
72 "S202.3": QCoreApplication.translate( |
73 "Security", |
73 "Security", |
74 "'tarfile.extractall()' used without any validation. Please check and" |
74 "'tarfile.extractall()' used without any validation. Please check and" |
75 " discard dangerous members.", |
75 " discard dangerous members.", |
76 ), |
76 ), |
77 # blacklisted calls |
77 # prohibited calls |
78 "S301": QCoreApplication.translate( |
78 "S301": QCoreApplication.translate( |
79 "Security", |
79 "Security", |
80 "Pickle and modules that wrap it can be unsafe when used to " |
80 "Pickle and modules that wrap it can be unsafe when used to " |
81 "deserialize untrusted data, possible security issue.", |
81 "deserialize untrusted data, possible security issue.", |
82 ), |
82 ), |
206 ), |
206 ), |
207 "S332": QCoreApplication.translate( |
207 "S332": QCoreApplication.translate( |
208 "Security", |
208 "Security", |
209 "Use of insecure {0} hash for security. Consider 'usedforsecurity=False'.", |
209 "Use of insecure {0} hash for security. Consider 'usedforsecurity=False'.", |
210 ), |
210 ), |
211 # blacklisted imports |
211 # prohibited imports |
212 "S401": QCoreApplication.translate( |
212 "S401": QCoreApplication.translate( |
213 "Security", |
213 "Security", |
214 "A telnet-related module is being imported. Telnet is considered" |
214 "A telnet-related module is being imported. Telnet is considered" |
215 " insecure. Use SSH or some other encrypted protocol.", |
215 " insecure. Use SSH or some other encrypted protocol.", |
216 ), |
216 ), |