From a4c84a0febdf5bee6fa755e9c2f312f5ef71bc1e Mon Sep 17 00:00:00 2001 From: Matt Schwager Date: Wed, 27 Nov 2019 11:09:05 -0700 Subject: [PATCH] Add wildcard import advantage to docs --- docs/README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/README.md b/docs/README.md index 3a82ca5..2f02bc0 100644 --- a/docs/README.md +++ b/docs/README.md @@ -59,6 +59,9 @@ the [`TarFile.extractall`](https://docs.python.org/3/library/tarfile.html#tarfil object method can often lead to security vulnerabilities. Dlint tracks variable names of instantiated objects and searches for insecure methods used by these specific objects. +* Dlint can identify insecurities arising from the use of wildcard imports. For +example, `from os import *`, which results in insecure use of the `os` module, +such as a `system` call. * Dlint is built upon the ubiquitous [Flake8](https://flake8.pycqa.org/en/latest/) project so it's easy to use, provides a fully-featured interface, and is backed by the [Python Code Quality Authority](https://github.com/PyCQA). This means