enthought / enthought/traitsui

Use of possibly insecure eval function - consider using safer ast.literal_eval.

Open
#1,773 0 comments 0 reactions 0 assignees View on GitHub
difficulty: intermediate type: cleanup
Dominant language
Python
Stars
306
Forks
99
PR merge metrics
No merged PRs in 30d

Description

Issue: [B307:blacklist] Use of possibly insecure function - consider using safer ast.literal_eval.
More Info: https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b307-eval
Severity: Medium Confidence: High

Locations:
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/csv_list_editor.py#L128
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/csv_list_editor.py#L129
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/range_editor.py#L124
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/editors/range_editor.py#L130
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/qt4/check_list_editor.py#L263
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/qt4/color_trait.py#L36
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/qt4/extra/bounds_editor.py#L93
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/wx/check_list_editor.py#L243
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/wx/color_trait.py#L134
https://github.com/enthought/traitsui/blob/87dceb219b8b7b547907f031aaca70e1a66b7945/traitsui/wx/extra/bounds_editor.py#L158



Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.