eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/SecurityChecker.py

changeset 7615
ca2949b1a29a
parent 7614
646742c260bd
child 7616
01d646569115
diff -r 646742c260bd -r ca2949b1a29a eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/SecurityChecker.py
--- a/eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/SecurityChecker.py	Tue Jun 09 20:10:59 2020 +0200
+++ b/eric6/Plugins/CheckerPlugins/CodeStyleChecker/Security/SecurityChecker.py	Wed Jun 10 17:52:53 2020 +0200
@@ -38,6 +38,9 @@
         # hardcoded tmp directory
         "S108",
         
+        # try-except
+        "S110", "S112",
+        
         # flask app
         "S201",
         
@@ -55,17 +58,38 @@
         # insecure certificate usage
         "S501",
         
+        # insecure SSL/TLS protocol version
+        "S502", "S503", "S504",
+        
         # YAML load
         "S506",
         
+        # SSH host key verification
+        "S507",
+        
         # Shell injection
         "S601", "S602", "S603", "S604", "S605", "S606", "S607",
         
+        # SQL injection
+        "S608",
+        
+        # Wildcard injection
+        "S609",
+        
         # Django SQL injection
         "S610", "S611",
         
+        # Jinja2 templates
+        "S701",
+        
+        # Mako templates
+        "S702",
+        
         # Django XSS vulnerability
         "S703",
+        
+        # Syntax error
+        "S999",
     ]
     
     def __init__(self, source, filename, select, ignore, expected, repeat,

eric ide

mercurial