supervision/.github
Onuralp SEZER daf4046fd2
feat(xml-parsing): 🔐 enhance security with defusedxml and bandit rules
fix bandit rule B318: (xml-attribute-parsing) defusedxml package should be used to parse untrusted XML data
fix bandit rule B314: (xml-entity-expansion) XML entity expansion should be disabled
fix bandit rule B413: (xml-etree-parse) XML parsing library should be secure
fix bandit rule B412: (xml-lib-exploits) XML libraries should be vetted for defusedxml or lxml.vulns
fix bandit rule B410: (xml-minidom-xxe) XML minidom can be vulnerable to XML eXternal Entity attacks

Signed-off-by: Onuralp SEZER <thunderbirdtr@gmail.com>
2023-12-10 13:57:51 +03:00
..
ISSUE_TEMPLATE feat: 🚀 pre-commit and initial formatted files 2023-07-25 13:02:26 +03:00
workflows Merge branch 'develop' into py12-upgrade 2023-12-08 00:09:48 +03:00
dependabot.yml ci(dependabot): ⬆️ create dependabot.yml config for update github actions and python packages automatically 2023-10-14 18:08:46 +03:00
requirements-dev-min.txt feat(xml-parsing): 🔐 enhance security with defusedxml and bandit rules 2023-12-10 13:57:51 +03:00