nlohmann / json / 38059313028

99%

push

github

Check the URL scheme before downloading in generate_docset.py (#5803)

Codacy flagged two Bandit findings in the docset generator added in
#5799: B310 (urlopen with an unchecked scheme) and B506 (yaml.load).
download() now rejects anything but http(s) URLs before opening them,
and the yaml.load call is marked, since its Loader derives from
yaml.SafeLoader. The SHA-1 used to name downloaded files is marked as
not used for security.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

3042 of 3240 branches covered (93.89%)

8805 of 8931 relevant lines covered (98.59%)

7300858.48 hits per line