From 262edc8cc96e6bb1d1328e19c279cdf9eedb9cc5 Mon Sep 17 00:00:00 2001 From: suzhengwei Date: Thu, 24 Dec 2020 15:40:07 +0800 Subject: [PATCH] remove bandit B322 check The check for this call to input() has been removed. The input method in Python 2 will read from standard input, evaluate and run the resulting string as python source code. This is similar, though in many ways worse, than using eval. On Python 2, use raw_input instead, input is safe in Python 3. Change-Id: I8654f0c197bfe88796b56e9d85f563cdded6e8a8 --- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tox.ini b/tox.ini index 68dfff118..00544499e 100644 --- a/tox.ini +++ b/tox.ini @@ -26,7 +26,7 @@ passenv = http_proxy HTTP_PROXY https_proxy HTTPS_PROXY no_proxy NO_PROXY commands = doc8 doc/source/ CONTRIBUTING.rst HACKING.rst README.rst flake8 - bandit -r watcher -x watcher/tests/* -n5 -ll -s B320,B322 + bandit -r watcher -x watcher/tests/* -n5 -ll -s B320 [testenv:venv] setenv = PYTHONHASHSEED=0