)]}'
{"bandit/plugins/mako_templates.py":[{"author":{"_account_id":11716,"name":"Tim Kelsey","email":"timothy.kelsey@uk.ibm.com","username":"tkelsey"},"change_message_id":"8f10b27ba3266c1e351672d242f7ef8506883183","unresolved":false,"context_lines":[{"line_number":24,"context_line":"        func \u003d qualname_list[-1]"},{"line_number":25,"context_line":"        if \u0027mako\u0027 in qualname_list and func \u003d\u003d \u0027Template\u0027:"},{"line_number":26,"context_line":"            # unlike Jinja2, mako does not have an template wide autoescape"},{"line_number":27,"context_line":"            # feature and thus each variable mus be carefully sanitized."},{"line_number":28,"context_line":"            return(bandit.WARN, \"Mako templates allow HTML/JS rendering\""},{"line_number":29,"context_line":"                   \" by default and are inherently open to XSS attacks.\""},{"line_number":30,"context_line":"                   \" Ensure variables in all templates are properly\""}],"source_content_type":"text/x-python","patch_set":4,"id":"ba7be1f8_f22cbc4c","line":27,"updated":"2015-03-02 09:46:43.000000000","message":"nit: typeo in comment, yeah I\u0027m pedantic :P","commit_id":"4d80d29e06958652e986409ddb3526bba6466e4b"},{"author":{"_account_id":15173,"name":"Rob Fletcher","email":"rfletch.vol@gmail.com","username":"fletcher"},"change_message_id":"f3b874b201f835c22226b54144abfe17734af514","unresolved":false,"context_lines":[{"line_number":24,"context_line":"        func \u003d qualname_list[-1]"},{"line_number":25,"context_line":"        if \u0027mako\u0027 in qualname_list and func \u003d\u003d \u0027Template\u0027:"},{"line_number":26,"context_line":"            # unlike Jinja2, mako does not have an template wide autoescape"},{"line_number":27,"context_line":"            # feature and thus each variable mus be carefully sanitized."},{"line_number":28,"context_line":"            return(bandit.WARN, \"Mako templates allow HTML/JS rendering\""},{"line_number":29,"context_line":"                   \" by default and are inherently open to XSS attacks.\""},{"line_number":30,"context_line":"                   \" Ensure variables in all templates are properly\""}],"source_content_type":"text/x-python","patch_set":4,"id":"ba7be1f8_fb70fba5","line":27,"in_reply_to":"ba7be1f8_f22cbc4c","updated":"2015-03-02 19:49:10.000000000","message":"Done","commit_id":"4d80d29e06958652e986409ddb3526bba6466e4b"}],"examples/mako_templating.py":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"85d752975d8a39da8da64d3c18334e9253b4b3e6","unresolved":false,"context_lines":[{"line_number":5,"context_line":""},{"line_number":6,"context_line":"Template(\"hello\")"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# XXX(fletcher): for some reason, bandit is missing the one below. keeping it"},{"line_number":9,"context_line":"# in for now so that if it gets fixed inadvertitently we know."},{"line_number":10,"context_line":"mako.template.Template(\"hern\")"},{"line_number":11,"context_line":"template.Template(\"hern\")"}],"source_content_type":"text/x-python","patch_set":3,"id":"ba7be1f8_ee23b7ba","line":8,"updated":"2015-02-25 03:56:36.000000000","message":"It is?  Shouldn\u0027t be...","commit_id":"cec0df084a450252e34e018eaef0acae02cfe259"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"9a3a0bb90a8fa21becbe6ad9f8a98c883263c62f","unresolved":false,"context_lines":[{"line_number":5,"context_line":""},{"line_number":6,"context_line":"Template(\"hello\")"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# XXX(fletcher): for some reason, bandit is missing the one below. keeping it"},{"line_number":9,"context_line":"# in for now so that if it gets fixed inadvertitently we know."},{"line_number":10,"context_line":"mako.template.Template(\"hern\")"},{"line_number":11,"context_line":"template.Template(\"hern\")"}],"source_content_type":"text/x-python","patch_set":3,"id":"ba7be1f8_7a16814d","line":8,"in_reply_to":"ba7be1f8_14963c3f","updated":"2015-02-25 16:58:43.000000000","message":"Hmm, that\u0027s terrifying.  The one thing we never want is a false negative.","commit_id":"cec0df084a450252e34e018eaef0acae02cfe259"},{"author":{"_account_id":15173,"name":"Rob Fletcher","email":"rfletch.vol@gmail.com","username":"fletcher"},"change_message_id":"eaa3bec2b859510a0fd501d3638716fe4961d9c1","unresolved":false,"context_lines":[{"line_number":5,"context_line":""},{"line_number":6,"context_line":"Template(\"hello\")"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# XXX(fletcher): for some reason, bandit is missing the one below. keeping it"},{"line_number":9,"context_line":"# in for now so that if it gets fixed inadvertitently we know."},{"line_number":10,"context_line":"mako.template.Template(\"hern\")"},{"line_number":11,"context_line":"template.Template(\"hern\")"}],"source_content_type":"text/x-python","patch_set":3,"id":"ba7be1f8_14963c3f","line":8,"in_reply_to":"ba7be1f8_ee23b7ba","updated":"2015-02-25 16:37:15.000000000","message":"Yah, it\u0027s weird. The qualname_list looks like [\u0027Template\u0027] instead of something like [\u0027mako\u0027, \u0027template\u0027, \u0027Template\u0027]","commit_id":"cec0df084a450252e34e018eaef0acae02cfe259"}]}