diff -r 4e8b98454baa -r 800c432b34c8 eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/flaskDebug.py --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/flaskDebug.py Sat May 15 18:45:04 2021 +0200 @@ -0,0 +1,56 @@ +# -*- coding: utf-8 -*- + +# Copyright (c) 2020 - 2021 Detlev Offenbach <detlev@die-offenbachs.de> +# + +""" +Module implementing checks for running a flask application with enabled debug. +""" + +# +# This is a modified version of the one found in the bandit package. +# +# Original Copyright 2015 Hewlett-Packard Development Company, L.P. +# +# SPDX-License-Identifier: Apache-2.0 +# + + +def getChecks(): + """ + Public method to get a dictionary with checks handled by this module. + + @return dictionary containing checker lists containing checker function and + list of codes + @rtype dict + """ + return { + "Call": [ + (checkFlaskDebug, ("S201",)), + ], + } + + +def checkFlaskDebug(reportError, context, config): + """ + Function to check for a flask app being run with debug. + + @param reportError function to be used to report errors + @type func + @param context security context object + @type SecurityContext + @param config dictionary with configuration data + @type dict + """ + if ( + context.isModuleImportedLike('flask') and + context.callFunctionNameQual.endswith('.run') and + context.checkCallArgValue('debug', 'True') + ): + reportError( + context.node.lineno - 1, + context.node.col_offset, + "S201", + "L", + "M" + )