)]}'
{"bandit/node_visitor.py":[{"author":{"_account_id":1528,"name":"Stanislaw Pitucha","email":"viraptor@gmail.com","username":"stanislaw-pitucha"},"change_message_id":"2a11a8e0756d87ac3af68e658ada117e9cf0a55a","unresolved":false,"context_lines":[{"line_number":21,"context_line":"import copy"},{"line_number":22,"context_line":"from bandit import tester as b_tester"},{"line_number":23,"context_line":"from bandit import utils as b_utils"},{"line_number":24,"context_line":"from bandit.constants import *"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"class BanditNodeVisitor(ast.NodeVisitor):"}],"source_content_type":"text/x-python","patch_set":2,"id":"baa201ad_9ead7734","line":24,"updated":"2014-09-30 15:54:40.000000000","message":"I believe you\u0027re using only ERROR - projects usually discourage wildcard importing","commit_id":"020ee2b9d0938bd79e7ce7e9ccaef3ce9e820533"},{"author":{"_account_id":11029,"name":"Jamie Finnigan","email":"jamiefinnigan@gmail.com","username":"jamiefinnigan"},"change_message_id":"85ada99c9304358ede5c1aad077778bdb22acc8d","unresolved":false,"context_lines":[{"line_number":142,"context_line":"        super(BanditNodeVisitor, self).generic_visit(node)"},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"    def visit_Exec(self, node):"},{"line_number":145,"context_line":"        # NOTE(tkelsey): do we need more user control over this?"},{"line_number":146,"context_line":"        result \u003d (ERROR, \"Use of exec detected.\")"},{"line_number":147,"context_line":"        self.context[\u0027lineno\u0027] \u003d node.lineno"},{"line_number":148,"context_line":"        self.context[\u0027str\u0027] \u003d \u0027exec\u0027"}],"source_content_type":"text/x-python","patch_set":2,"id":"baa201ad_518f9c23","line":145,"updated":"2014-09-29 17:34:23.000000000","message":"Instead of generating test results here directly, can we use the same self.tester.run_tests() pattern as for other visit_[nodetype] functions?  I see a single test that alerts on usage of exec being the main case, but we may also want to define additional tests that treat \u0027exec\u0027 calls differently depending on what is being exec\u0027d.","commit_id":"020ee2b9d0938bd79e7ce7e9ccaef3ce9e820533"}]}