hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 11:46:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Expand test of py/paramiko-missing-host-key-validation

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2023-04-18 11:56:07 +02:00
parent 4e49df1615
commit a5a0861be0
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
python/ql/test/query-tests/Security/CWE-295-MissingHostKeyValidation/paramiko_host_key.py
View File

@@ -11,3 +11,10 @@ client.set_missing_host_key_policy(WarningPolicy) # bad
client.set_missing_host_key_policy(AutoAddPolicy()) # bad client.set_missing_host_key_policy(AutoAddPolicy()) # bad
client.set_missing_host_key_policy(RejectPolicy()) # good client.set_missing_host_key_policy(RejectPolicy()) # good
client.set_missing_host_key_policy(WarningPolicy()) # bad client.set_missing_host_key_policy(WarningPolicy()) # bad
# different import
import paramiko
client = paramiko.SSHClient()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy) # bad