qdegraaf
|
6dfc1ccd6f
|
[`flake8-bandit`] Implement `S502` `SslInsecureVersion` rule (#9390)
## Summary
Adds S502 rule for the
[flake8-bandit](https://github.com/tylerwince/flake8-bandit) plugin
port.
Checks for calls to any function with keywords arguments `ssl_version`
or `method` or for kwargs `method` in calls to `OpenSSL.SSL.Context` and
`ssl_version` in calls to `ssl.wrap_socket` which have an insecure
ssl_version valu. See also
https://bandit.readthedocs.io/en/latest/_modules/bandit/plugins/insecure_ssl_tls.html#ssl_with_bad_version
## Test Plan
Fixture added
## Issue Link
Refers: https://github.com/astral-sh/ruff/issues/1646
|
2024-01-05 01:27:41 +00:00 |