john-bampton / john-bampton/john-bampton.github.io
(BAN-B310) Audit required: Use of an insecure method method from `urllib` detected
Open
python
security
- Dominant language
- Python
- Stars
- 11
- Forks
- 16
- Avg merge
- 10h 33m
- Merged PRs (30d)
- 3
Description
## Description
`urllib` not only opens `http://` or `https://` URLs, but also `ftp://` and `file://`. With this, it might be possible to open local files on the executing machine which might be a security risk if the URL to open can be manipulated by an external user.
## Occurrences
There is 1 occurrence of this issue in the repository.
See all occurrences on DeepSource → [app.deepsource.com/gh/john-bampton/john-bampton.github.io/issue/BAN-B310/occurrences/](https://app.deepsource.com/gh/john-bampton/john-bampton.github.io/issue/BAN-B310/occurrences/)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.