Skip to content
This repository has been archived by the owner on Oct 6, 2020. It is now read-only.

Add linter for detecting itsdangerous use with none algorithm #36

Closed
mschwager opened this issue Dec 5, 2019 · 0 comments
Closed

Add linter for detecting itsdangerous use with none algorithm #36

mschwager opened this issue Dec 5, 2019 · 0 comments

Comments

@mschwager
Copy link
Collaborator

Various itsdangerous classes take an algorithm argument that can lead to empty signatures. E.g.

  • Signer -> algorithm -> signer.NoneAlgorithm
  • TimestampSigner -> algorithm -> signer.NoneAlgorithm
  • JSONWebSignatureSerializer -> algorithm_name -> "none"

Let's check these class kwargs.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mschwager