Niels Lohmann f8b47ff6f6 Check the URL scheme before downloading in generate_docset.py (#5803) ...

Codacy flagged two Bandit findings in the docset generator added in
#5799: B310 (urlopen with an unchecked scheme) and B506 (yaml.load).
download() now rejects anything but http(s) URLs before opening them,
and the yaml.load call is marked, since its Loader derives from
yaml.SafeLoader. The SHA-1 used to name downloaded files is marked as
not used for security.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-10-10 16:21:53 +02:00

19 KiB

Executable File

Raw Blame History

View Raw