Fri, 02 Aug 2024 19:24:32 +0200
Code Style Checker
- Updated the Security checker to `bandit v1.7.9`.
--- a/docs/ThirdParty.md Fri Aug 02 19:12:15 2024 +0200 +++ b/docs/ThirdParty.md Fri Aug 02 19:24:32 2024 +0200 @@ -18,7 +18,7 @@ | Name | Version | License | |:-----------------------------:|:---------:|:-----------------------------------| -| bandit | 1.7.8 | Apache License 2.0 | +| bandit | 1.7.9 | Apache License 2.0 | | flake8-alphabetize | 0.0.21 | MIT License (MIT No Attribution) | | flake8-annotations | 3.1.1 | MIT License (MIT) | | flake8-annotations-complexity | 0.0.8 | MIT License (MIT) |
--- a/docs/changelog.md Fri Aug 02 19:12:15 2024 +0200 +++ b/docs/changelog.md Fri Aug 02 19:24:32 2024 +0200 @@ -2,9 +2,12 @@ ### Version 24.9 - bug fixes +- Code Style Checker + - Updated these checkers. + - Security to `bandit v1.7.9` - Third Party Packages - Upgraded `pip-licenses` to version 5.0.0. - - Upgraded pycodestyle to version 2.12.0. + - Upgraded `pycodestyle` to version 2.12.0. ### Version 24.8 - bug fixes
--- a/src/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/injectionShell.py Fri Aug 02 19:12:15 2024 +0200 +++ b/src/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/Checks/injectionShell.py Fri Aug 02 19:24:32 2024 +0200 @@ -285,7 +285,7 @@ node = context.node.args[0] # some calls take an arg list, check the first part - if isinstance(node, ast.List): + if isinstance(node, ast.List) and node.elts: node = node.elts[0] # make sure the param is a string literal and not a var name
--- a/src/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/__init__.py Fri Aug 02 19:12:15 2024 +0200 +++ b/src/eric7/Plugins/CheckerPlugins/CodeStyleChecker/Security/__init__.py Fri Aug 02 19:24:32 2024 +0200 @@ -8,5 +8,5 @@ """ ########################################################################### -## The security checker is based on Bandit v1.7.8. ## +## The security checker is based on Bandit v1.7.9. ## ###########################################################################