finnigja/bandit-og

*** PROJECT MOVED - SEE README *** Python AST-based static analyzer from OpenStack Security Group

bandit-og's Issues

Blacklist os.exec*, os.popen*, os.spawn* and friends

All the variants of os.exec* should be in the blacklist.

https://docs.python.org/2/library/os.html#os.execv

os.system and os.popen should probably be in the list of bad names, not just in the wildcard test suite. They're both deprecated in any case.

We also need to blacklist all the variants of os.popen* and os.spawn*, and os.startfile.

As an aside, it might make sense to formalize a blacklist format beyond test_calls.call_bad_names(), and ideally include a way to match things with regex, so that calls with many variant names like those mentioned above don't get messy.