enthought / enthought/traitsui
Use of possibly insecure eval function - consider using safer ast.literal_eval.
- Dominant language
- Python
- Stars
- 306
- Forks
- 99
- PR merge metrics
- No merged PRs in 30d
Description
Issue: [B307:blacklist] Use of possibly insecure function - consider using safer ast.literal_eval.
More Info: https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b307-eval
Severity: Medium Confidence: High
Locations:
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/csv_list_editor.py#L128
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/csv_list_editor.py#L129
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/range_editor.py#L124
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/range_editor.py#L130
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/qt4/check_list_editor.py#L263
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/qt4/color_trait.py#L36
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/qt4/extra/bounds_editor.py#L93
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/wx/check_list_editor.py#L243
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/wx/color_trait.py#L134
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/wx/extra/bounds_editor.py#L158
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.