--- a/eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/SecurityChecker.py Tue Jun 09 20:10:59 2020 +0200 +++ b/eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/SecurityChecker.py Wed Jun 10 17:52:53 2020 +0200 @@ -38,6 +38,9 @@ # hardcoded tmp directory "S108", + # try-except + "S110", "S112", + # flask app "S201", @@ -55,17 +58,38 @@ # insecure certificate usage "S501", + # insecure SSL/TLS protocol version + "S502", "S503", "S504", + # YAML load "S506", + # SSH host key verification + "S507", + # Shell injection "S601", "S602", "S603", "S604", "S605", "S606", "S607", + # SQL injection + "S608", + + # Wildcard injection + "S609", + # Django SQL injection "S610", "S611", + # Jinja2 templates + "S701", + + # Mako templates + "S702", + # Django XSS vulnerability "S703", + + # Syntax error + "S999", ] def __init__(self, source, filename, select, ignore, expected, repeat,