d4c80f160c
* Add bandit to pre-commit and CI, use to catch known vulnerable XML parsing * Use defusedxml instead of direct xml.etree to parse XML * Move config to tests/bandit.yaml
11 lines
134 B
YAML
11 lines
134 B
YAML
# https://bandit.readthedocs.io/en/latest/config.html
|
|
|
|
tests:
|
|
- B313
|
|
- B314
|
|
- B315
|
|
- B316
|
|
- B317
|
|
- B318
|
|
- B319
|
|
- B320
|