Skip to content

Commit

Permalink
Remap the rule IDs (#184)
Browse files Browse the repository at this point in the history
Switch to language specific IDs where the prefix identifies the language
followed by a three digit number.

For example:

PY503 = Python rule 503
GO103 = Go rule 103

Signed-off-by: Eric Brown <[email protected]>
  • Loading branch information
ericwb authored Dec 31, 2023
1 parent 6bff57e commit 269a27e
Show file tree
Hide file tree
Showing 95 changed files with 144 additions and 143 deletions.
3 changes: 2 additions & 1 deletion precli/core/result.py
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,8 @@ def rule_id(self) -> str:
"""
The ID of the rule.
The IDs match PREXXXX where XXXX is a unique number.
The IDs match ??XXX where ?? is language identifier and XXX is a
unique number.
:return: rule ID
:rtype: str
Expand Down
2 changes: 1 addition & 1 deletion precli/parsers/python.py
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@
Import = namedtuple("Import", "module alias")

SUPPRESS_COMMENT = re.compile(r"# suppress:? (?P<rules>[^#]+)?#?")
SUPPRESSED_RULES = re.compile(r"(?:(PRE\d\d\d\d|[a-z_]+),?)+")
SUPPRESSED_RULES = re.compile(r"(?:(PY\d\d\d|[a-z_]+),?)+")


class Python(Parser):
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -129,7 +129,7 @@
.. seealso::
- `Improper Hostkey Validation Using SSH <https://docs.securesauce.dev/rules/PRE1501>`_
- `Improper Hostkey Validation Using SSH <https://docs.securesauce.dev/rules/GO501>`_
- `ssh package - golang.org_x_crypto_ssh - Go Packages <https://pkg.go.dev/golang.org/x/crypto/ssh#InsecureIgnoreHostKey>`_
- `CWE-295: Improper Certificate Validation <https://cwe.mitre.org/data/definitions/295.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/M2Crypto/m2crypto_weak_key.py
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak Keys in M2Crypto Module <https://docs.securesauce.dev/rules/PRE0509>`_
- `Inadequate Encryption Strength Using Weak Keys in M2Crypto Module <https://docs.securesauce.dev/rules/PY509>`_
- `m2crypto _ m2crypto · GitLab <https://gitlab.com/m2crypto/m2crypto>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/PyYAML/yaml_load.py
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@
.. seealso::
- `Deserialization of Untrusted Data in the PyYAML Module <https://docs.securesauce.dev/rules/PRE0521>`_
- `Deserialization of Untrusted Data in the PyYAML Module <https://docs.securesauce.dev/rules/PY521>`_
- `PyYAML Documentation <https://pyyaml.org/wiki/PyYAMLDocumentation>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/aiohttp/no_certificate_verify.py
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@
.. seealso::
- `Improper Certificate Validation Using Requests Module <https://docs.securesauce.dev/rules/PRE0501>`_
- `Improper Certificate Validation Using Requests Module <https://docs.securesauce.dev/rules/PY501>`_
- `Advanced Client Usage — aiohttp documentation <https://docs.aiohttp.org/en/stable/client_advanced.html#ssl-control-for-tcp-sockets>`_
- `CWE-295: Improper Certificate Validation <https://cwe.mitre.org/data/definitions/295.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -107,7 +107,7 @@
.. seealso::
- `Use of a Broken or Risky Cryptographic Algorithm in Cryptography Module <https://docs.securesauce.dev/rules/PRE0502>`_
- `Use of a Broken or Risky Cryptographic Algorithm in Cryptography Module <https://docs.securesauce.dev/rules/PY502>`_
- `Symmetric encryption — Cryptography documentation <https://cryptography.io/en/latest/hazmat/primitives/symmetric-encryption/#weak-ciphers>`_
- `CWE-327: Use of a Broken or Risky Cryptographic Algorithm <https://cwe.mitre.org/data/definitions/327.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@
.. seealso::
- `Use of a Risky Cryptographic Cipher Mode in Cryptography Module <https://docs.securesauce.dev/rules/PRE0503>`_
- `Use of a Risky Cryptographic Cipher Mode in Cryptography Module <https://docs.securesauce.dev/rules/PY503>`_
- `Symmetric encryption — Cryptography documentation <https://cryptography.io/en/latest/hazmat/primitives/symmetric-encryption/#insecure-modes>`_
- `CWE-327: Use of a Broken or Risky Cryptographic Algorithm <https://cwe.mitre.org/data/definitions/327.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/cryptography/cryptography_weak_hash.py
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@
.. seealso::
- `Reversible One Way Hash in Cryptography Module <https://docs.securesauce.dev/rules/PRE0504>`_
- `Reversible One Way Hash in Cryptography Module <https://docs.securesauce.dev/rules/PY504>`_
- `Message digests (Hashing) — Cryptography <https://cryptography.io/en/latest/hazmat/primitives/cryptographic-hashes/>`_
- `CWE-328: Use of Weak Hash <https://cwe.mitre.org/data/definitions/328.html>`_
- `NIST Policy on Hash Functions <https://csrc.nist.gov/projects/hash-functions>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/cryptography/cryptography_weak_key.py
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak Keys in Cryptography Module <https://docs.securesauce.dev/rules/PRE0505>`_
- `Inadequate Encryption Strength Using Weak Keys in Cryptography Module <https://docs.securesauce.dev/rules/PY505>`_
- `Asymmetric algorithms — Cryptography documentation <https://cryptography.io/en/latest/hazmat/primitives/asymmetric/>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/dill/dill_load.py
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
.. seealso::
- `Deserialization of Untrusted Data in the Dill Module <https://docs.securesauce.dev/rules/PRE0506>`_
- `Deserialization of Untrusted Data in the Dill Module <https://docs.securesauce.dev/rules/PY506>`_
- `dill package documentation <https://dill.readthedocs.io/en/latest/index.html>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/httpx/no_certificate_verify.py
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
.. seealso::
- `Improper Certificate Validation Using Httpx Module <https://docs.securesauce.dev/rules/PRE0507>`_
- `Improper Certificate Validation Using Httpx Module <https://docs.securesauce.dev/rules/PY507>`_
- `HTTPX <https://www.python-httpx.org/>`_
- `CWE-295: Improper Certificate Validation <https://cwe.mitre.org/data/definitions/295.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/jsonpickle/jsonpickle_decode.py
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@
.. seealso::
- `Deserialization of Untrusted Data in JsonPickle Module <https://docs.securesauce.dev/rules/PRE0508>`_
- `Deserialization of Untrusted Data in JsonPickle Module <https://docs.securesauce.dev/rules/PY508>`_
- `jsonpickle Documentation <https://jsonpickle.github.io/>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
- `pickle — Python object serialization <https://docs.python.org/3/library/pickle.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pandas/pandas_read_pickle.py
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
.. seealso::
- `Deserialization of Untrusted Data in Pandas Module <https://docs.securesauce.dev/rules/PRE0510>`_
- `Deserialization of Untrusted Data in Pandas Module <https://docs.securesauce.dev/rules/PY510>`_
- `Input_output — pandas <https://pandas.pydata.org/docs/reference/io.html#pickling>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
- `pickle — Python object serialization <https://docs.python.org/3/library/pickle.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@
.. seealso::
- `Improper Certificate Validation Using Paramiko Module <https://docs.securesauce.dev/rules/PRE0511>`_
- `Improper Certificate Validation Using Paramiko Module <https://docs.securesauce.dev/rules/PY511>`_
- `Paramiko’s documentation <https://docs.paramiko.org/en/latest/>`_
- `CWE-295: Improper Certificate Validation <https://cwe.mitre.org/data/definitions/295.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pycrypto/pycrypto_weak_cipher.py
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,7 @@
.. seealso::
- `Use of a Broken or Risky Cryptographic Algorithm in PyCrypto Module <https://docs.securesauce.dev/rules/PRE0512>`_
- `Use of a Broken or Risky Cryptographic Algorithm in PyCrypto Module <https://docs.securesauce.dev/rules/PY512>`_
- `PyCrypto - The Python Cryptography Toolkit <https://www.pycrypto.org/>`_
- `CWE-327: Use of a Broken or Risky Cryptographic Algorithm <https://cwe.mitre.org/data/definitions/327.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pycrypto/pycrypto_weak_hash.py
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@
.. seealso::
- `Reversible One Way Hash in PyCrypto Module <https://docs.securesauce.dev/rules/PRE0513>`_
- `Reversible One Way Hash in PyCrypto Module <https://docs.securesauce.dev/rules/PY513>`_
- `PyCrypto - The Python Cryptography Toolkit <https://www.pycrypto.org/>`_
- `CWE-328: Use of Weak Hash <https://cwe.mitre.org/data/definitions/328.html>`_
- `NIST Policy on Hash Functions <https://csrc.nist.gov/projects/hash-functions>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pycrypto/pycrypto_weak_key.py
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak Keys in PyCrypto Module <https://docs.securesauce.dev/rules/PRE0514>`_
- `Inadequate Encryption Strength Using Weak Keys in PyCrypto Module <https://docs.securesauce.dev/rules/PY514>`_
- `PyCrypto - The Python Cryptography Toolkit <https://www.pycrypto.org/>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,7 @@
.. seealso::
- `Use of a Broken or Risky Cryptographic Algorithm in PyCrypto Module <https://docs.securesauce.dev/rules/PRE0515>`_
- `Use of a Broken or Risky Cryptographic Algorithm in PyCrypto Module <https://docs.securesauce.dev/rules/PY515>`_
- `PyCryptodome <https://www.pycryptodome.org/>`_
- `CWE-327: Use of a Broken or Risky Cryptographic Algorithm <https://cwe.mitre.org/data/definitions/327.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@
.. seealso::
- `Reversible One Way Hash in PyCryptodomex Module <https://docs.securesauce.dev/rules/PRE0516>`_
- `Reversible One Way Hash in PyCryptodomex Module <https://docs.securesauce.dev/rules/PY516>`_
- `PyCryptodome <https://www.pycryptodome.org/>`_
- `CWE-328: Use of Weak Hash <https://cwe.mitre.org/data/definitions/328.html>`_
- `NIST Policy on Hash Functions <https://csrc.nist.gov/projects/hash-functions>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak Keys in PyCrypto Module <https://docs.securesauce.dev/rules/PRE0517>`_
- `Inadequate Encryption Strength Using Weak Keys in PyCrypto Module <https://docs.securesauce.dev/rules/PY517>`_
- `PyCryptodome <https://www.pycryptodome.org/>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pyghmi/pyghmi_cleartext.py
Original file line number Diff line number Diff line change
Expand Up @@ -87,7 +87,7 @@
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Pyghmi Module <https://docs.securesauce.dev/rules/PRE0518>`_
- `Cleartext Transmission of Sensitive Information in the Pyghmi Module <https://docs.securesauce.dev/rules/PY518>`_
- `Documentation — pyghmi documentation <https://docs.openstack.org/pyghmi/latest/>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
- `Risks of Using the Intelligent Platform Management Interface (IPMI) CISA <https://www.cisa.gov/news-events/alerts/2013/07/26/risks-using-intelligent-platform-management-interface-ipmi>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pyopenssl/insecure_tls_method.py
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak SSL Protocols <https://docs.securesauce.dev/rules/PRE0519>`_
- `Inadequate Encryption Strength Using Weak SSL Protocols <https://docs.securesauce.dev/rules/PY519>`_
- `pyOpenSSL’s documentation <https://www.pyopenssl.org/en/latest/>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/pyopenssl/pyopenssl_weak_key.py
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak Keys in PyOpenSSL Module <https://docs.securesauce.dev/rules/PRE0520>`_
- `Inadequate Encryption Strength Using Weak Keys in PyOpenSSL Module <https://docs.securesauce.dev/rules/PY520>`_
- `crypto — Generic cryptographic module — pyOpenSSL documentation <https://www.pyopenssl.org/en/latest/api/crypto.html#pkey-objects>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/requests/no_certificate_verify.py
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
.. seealso::
- `Improper Certificate Validation Using Requests Module <https://docs.securesauce.dev/rules/PRE0522>`_
- `Improper Certificate Validation Using Requests Module <https://docs.securesauce.dev/rules/PY522>`_
- `Requests HTTP for Humans™ <https://requests.readthedocs.io/en/latest/>`_
- `CWE-295: Improper Certificate Validation <https://cwe.mitre.org/data/definitions/295.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/crypt/crypt_weak_hash.py
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,7 @@
.. seealso::
- `Reversible One Way Hash in Crypt Module <https://docs.securesauce.dev/rules/PRE0002>`_
- `Reversible One Way Hash in Crypt Module <https://docs.securesauce.dev/rules/PY002>`_
- `crypt — Function to check Unix passwords <https://docs.python.org/3/library/crypt.html>`_
- `CWE-328: Use of Weak Hash <https://cwe.mitre.org/data/definitions/328.html>`_
- `NIST Policy on Hash Functions <https://csrc.nist.gov/projects/hash-functions>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/ftplib/ftp_cleartext.py
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Ftplib Module <https://docs.securesauce.dev/rules/PRE0003>`_
- `Cleartext Transmission of Sensitive Information in the Ftplib Module <https://docs.securesauce.dev/rules/PY003>`_
- `ftplib — FTP protocol client <https://docs.python.org/3/library/ftplib.html>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
- https://www.paramiko.org/
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/hashlib/hashlib_weak_hash.py
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@
.. seealso::
- `Reversible One Way Hash in Hashlib Module <https://docs.securesauce.dev/rules/PRE0004>`_
- `Reversible One Way Hash in Hashlib Module <https://docs.securesauce.dev/rules/PY004>`_
- `hashlib — Secure hashes and message digests <https://docs.python.org/3/library/hashlib.html>`_
- `CWE-328: Use of Weak Hash <https://cwe.mitre.org/data/definitions/328.html>`_
- `NIST Policy on Hash Functions <https://csrc.nist.gov/projects/hash-functions>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/hmac/hmac_timing_attack.py
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@
.. seealso::
- `Observable Timing Discrepancy in Hmac Module <https://docs.securesauce.dev/rules/PRE0005>`_
- `Observable Timing Discrepancy in Hmac Module <https://docs.securesauce.dev/rules/PY005>`_
- `hmac — Keyed-Hashing for Message Authentication <https://docs.python.org/3/library/hmac.html>`_
- `CWE-208: Observable Timing Discrepancy <https://cwe.mitre.org/data/definitions/208.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/hmac/hmac_weak_hash.py
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@
.. seealso::
- `Reversible One Way Hash in Hmac Module <https://docs.securesauce.dev/rules/PRE0006>`_
- `Reversible One Way Hash in Hmac Module <https://docs.securesauce.dev/rules/PY006>`_
- `hmac — Keyed-Hashing for Message Authentication <https://docs.python.org/3/library/hmac.html>`_
- `CWE-328: Use of Weak Hash <https://cwe.mitre.org/data/definitions/328.html>`_
- `NIST Policy on Hash Functions <https://csrc.nist.gov/projects/hash-functions>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/imaplib/imap_cleartext.py
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Imaplib Module <https://docs.securesauce.dev/rules/PRE0007>`_
- `Cleartext Transmission of Sensitive Information in the Imaplib Module <https://docs.securesauce.dev/rules/PY007>`_
- `imaplib — IMAP4 protocol client <https://docs.python.org/3/library/imaplib.html>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/json/json_load.py
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
.. seealso::
- `Deserialization of Untrusted Data in the Json Module <https://docs.securesauce.dev/rules/PRE0008>`_
- `Deserialization of Untrusted Data in the Json Module <https://docs.securesauce.dev/rules/PY008>`_
- `json — JSON encoder and decoder <https://docs.python.org/3/library/json.html>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ def validate(recv: bytes):
.. seealso::
- `Code Injection in Logging Config <https://docs.securesauce.dev/rules/PRE0009>`_
- `Code Injection in Logging Config <https://docs.securesauce.dev/rules/PY009>`_
- `logging.config — Logging configuration <https://docs.python.org/3/library/logging.config.html#module-logging.config>`_
- `CWE-94: Improper Control of Generation of Code ('Code Injection') <https://cwe.mitre.org/data/definitions/94.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/marshal/marshal_load.py
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
.. seealso::
- `Deserialization of Untrusted Data in the Marshal Module <https://docs.securesauce.dev/rules/PRE0010>`_
- `Deserialization of Untrusted Data in the Marshal Module <https://docs.securesauce.dev/rules/PY010>`_
- `marshal — Internal Python object serialization <https://docs.python.org/3/library/marshal.html>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/nntplib/nntp_cleartext.py
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Nntplib Module <https://docs.securesauce.dev/rules/PRE0011>`_
- `Cleartext Transmission of Sensitive Information in the Nntplib Module <https://docs.securesauce.dev/rules/PY011>`_
- `nntplib — NNTP protocol client <https://docs.python.org/3/library/nntplib.html>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/pickle/pickle_load.py
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ def load_pickle_file(file_path):
.. seealso::
- `Deserialization of Untrusted Data in Pickle Module <https://docs.securesauce.dev/rules/PRE0012>`_
- `Deserialization of Untrusted Data in Pickle Module <https://docs.securesauce.dev/rules/PY012>`_
- `pickle — Python object serialization <https://docs.python.org/3/library/pickle.html>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
- `json — JSON encoder and decoder <https://docs.python.org/3/library/json.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/poplib/pop_cleartext.py
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Poplib Module <https://docs.securesauce.dev/rules/PRE0013>`_
- `Cleartext Transmission of Sensitive Information in the Poplib Module <https://docs.securesauce.dev/rules/PY013>`_
- `poplib — POP3 protocol client <https://docs.python.org/3/library/poplib.html>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/shelve/shelve_open.py
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@
.. seealso::
- `Deserialization of Untrusted Data in the Shelve Module <https://docs.securesauce.dev/rules/PRE0014>`_
- `Deserialization of Untrusted Data in the Shelve Module <https://docs.securesauce.dev/rules/PY014>`_
- `shelve — Python object persistence <https://docs.python.org/3/library/shelve.html>`_
- `CWE-502: Deserialization of Untrusted Data <https://cwe.mitre.org/data/definitions/502.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/smtplib/smtp_cleartext.py
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,7 @@ def prompt(prompt):
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Smtplib Module <https://docs.securesauce.dev/rules/PRE0015>`_
- `Cleartext Transmission of Sensitive Information in the Smtplib Module <https://docs.securesauce.dev/rules/PY015>`_
- `smtplib — SMTP protocol client <https://docs.python.org/3/library/smtplib.html>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@
.. seealso::
- `Improper Certificate Validation Using ssl._create_unverified_context <https://docs.securesauce.dev/rules/PRE0016>`_
- `Improper Certificate Validation Using ssl._create_unverified_context <https://docs.securesauce.dev/rules/PY016>`_
- `ssl — TLS/SSL wrapper for socket objects <https://docs.python.org/3/library/ssl.html>`_
- `CWE-295: Improper Certificate Validation <https://cwe.mitre.org/data/definitions/295.html>`_
Expand Down
2 changes: 1 addition & 1 deletion precli/rules/python/stdlib/ssl/insecure_tls_version.py
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@
.. seealso::
- `Inadequate Encryption Strength Using Weak SSL Protocols <https://docs.securesauce.dev/rules/PRE0017>`_
- `Inadequate Encryption Strength Using Weak SSL Protocols <https://docs.securesauce.dev/rules/PY017>`_
- `ssl — TLS/SSL wrapper for socket objects <https://docs.python.org/3/library/ssl.html>`_
- `CWE-326: Inadequate Encryption Strength <https://cwe.mitre.org/data/definitions/326.html>`_
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -101,7 +101,7 @@
.. seealso::
- `Cleartext Transmission of Sensitive Information in the Telnetlib Module <https://docs.securesauce.dev/rules/PRE0018>`_
- `Cleartext Transmission of Sensitive Information in the Telnetlib Module <https://docs.securesauce.dev/rules/PY018>`_
- `telnetlib — Telnet client <https://docs.python.org/3/library/telnetlib.html>`_
- `CWE-319: Cleartext Transmission of Sensitive Information <https://cwe.mitre.org/data/definitions/319.html>`_
- https://www.paramiko.org/
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@
.. seealso::
- `Insecure Temporary File in the Tempfile Module <https://docs.securesauce.dev/rules/PRE0019>`_
- `Insecure Temporary File in the Tempfile Module <https://docs.securesauce.dev/rules/PY019>`_
- `tempfile — Generate temporary files and directories <https://docs.python.org/3/library/tempfile.html#tempfile.mktemp>`_
- `CWE-377: Insecure Temporary File <https://cwe.mitre.org/data/definitions/377.html>`_
Expand Down
Loading

0 comments on commit 269a27e

Please sign in to comment.