diff roundup/backends/back_anydbm.py @ 6002:3175bb92ca28

Cleanups for bandit Set bandit to ignore use of md5. Treat schema from database as trusted to eval. We wrote it based on the schema.py file. Replace some bare except: with a proper exception. mode 775 for index directory is correct. Allows indices to be written by email and web interfaces that run as different users but can have the roundup group in common.
author John Rouillard <rouilj@ieee.org>
date Thu, 26 Dec 2019 21:44:50 -0500
parents ee2e8f8d6648
children e6073c2291c6
line wrap: on
line diff
--- a/roundup/backends/back_anydbm.py	Thu Dec 26 21:17:48 2019 -0500
+++ b/roundup/backends/back_anydbm.py	Thu Dec 26 21:44:50 2019 -0500
@@ -2217,7 +2217,7 @@
                 # calculation of the object.
                 return ('%s%s is not text, retrieve using '
                         'binary_content property. mdsum: %s')%(self.classname,
-                   nodeid, md5(self.db.getfile(self.classname, nodeid, None)).hexdigest())
+                   nodeid, md5(self.db.getfile(self.classname, nodeid, None)).hexdigest())  # nosec - bandit md5 use ok
         elif propname == 'binary_content':
             return self.db.getfile(self.classname, nodeid, None)
 

Roundup Issue Tracker: http://roundup-tracker.org/