--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/sshNoHostKeyVerification.py Wed Jun 10 17:52:53 2020 +0200 @@ -0,0 +1,59 @@ +# -*- coding: utf-8 -*- + +# Copyright (c) 2020 Detlev Offenbach <detlev@die-offenbachs.de> +# + +""" +Module implementing a check for use of mako templates. +""" + +# +# This is a modified version of the one found in the bandit package. +# +# Original Copyright 2014 Hewlett-Packard Development Company, L.P. +# +# SPDX-License-Identifier: Apache-2.0 +# + + +def getChecks(): + """ + Public method to get a dictionary with checks handled by this module. + + @return dictionary containing checker lists containing checker function and + list of codes + @rtype dict + """ + return { + "Call": [ + (checkSshNoHostKeyVerification, ("S507",)), + ], + } + + +def checkSshNoHostKeyVerification(reportError, context, config): + """ + Function to check for use of mako templates. + + @param reportError function to be used to report errors + @type func + @param context security context object + @type SecurityContext + @param config dictionary with configuration data + @type dict + """ + if ( + context.isModuleImportedLike('paramiko') and + context.callFunctionName == 'set_missing_host_key_policy' + ): + if ( + context.callArgs and + context.callArgs[0] in ['AutoAddPolicy', 'WarningPolicy'] + ): + reportError( + context.node.lineno - 1, + context.node.col_offset, + "S507", + "H", + "M", + )