KevinHock

2 Duplication problems and a false-positive in a portion of django.nV output, among other things.

4

So I run `python -m pyt -a E -f example/django.nV/taskManager/upload_controller.py -trim` and out I get: ```python 5 vulnerabilities found: Vulnerability 1: File: example/django.nV/taskManager/misc.py > User input at line 24, trigger...

We [currently use inlining instead of summaries](https://github.com/python-security/pyt/tree/master/pyt/cfg), for inter-procedural analysis, which makes PyT slower than it needs to be. Here are some videos, specifically the last one, explains function summaries...

Support class-based views

4

I wrote some of the code to do this in a branch https://github.com/python-security/pyt/compare/class_based_views, but since I'm working on other things and this feature seems cool and important I'm making this...

Test coverage is always important, and my goal is to eventually be at 100%. I'll be sure to do this for PRs from now on, or at least try to,...

You can do: `pip install pydocstyle` and then run this script while in the `pyt` directory ```python import os import re import subprocess import sys os.chdir(os.path.join('pyt')) try: docstyle = subprocess.run(["pydocstyle",...

I don't know where the added the whitespace add and diffs came from though.

[Feature Request] Add support for strings via Z3-str2

3

Whenever you get a chance, can you please add support for strings? I'm not sure how much work it would be but it would be quite nice :) It is...

Also add the ability to specify ACL on creation, resolving https://github.com/pinterest/knox/blob/ad067734f42798722f803a47fc5a9898011296da/client/create.go#L58

For more information, please see [OWASP](https://www.owasp.org/index.php/Unvalidated_Redirects_and_Forwards_Cheat_Sheet) and [StackOverflow](https://stackoverflow.com/questions/23233683/what-is-the-best-way-to-avoid-open-redirects-in-django) In https://github.com/mitsuhiko/flask-pastebin/blob/master/pastebin.py#L140 ``` Vulnerability 4: File: flask-pastebin/pastebin.py > User input at line 140, trigger word "get(": next_url = request.args.get('next') or url_for('new_paste') File:...

There's currently 0% test coverage, the code is fairly straightforward, but test will make any contributions a lot easier to merge.