)]}'
{"bandit/plugins/yaml_load.py":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"da6ed579_000fa188","updated":"2016-01-14 18:14:56.000000000","message":"Can you look at my pretty-up-docs patch and follow the pattern?  Thanks","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":1,"context_line":"# -*- coding:utf-8 -*-"},{"line_number":2,"context_line":"#"},{"line_number":3,"context_line":"# Copyright 2015 Hewlett-Packard Development Company, L.P."},{"line_number":4,"context_line":"#"},{"line_number":5,"context_line":"# Licensed under the Apache License, Version 2.0 (the \"License\"); you may"},{"line_number":6,"context_line":"# not use this file except in compliance with the License. You may obtain"}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_2060a5a4","line":3,"updated":"2016-01-14 18:14:56.000000000","message":"2016, and might want rackspace","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":14,"context_line":"# License for the specific language governing permissions and limitations"},{"line_number":15,"context_line":"# under the License."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"r\"\"\""},{"line_number":18,"context_line":"Description"},{"line_number":19,"context_line":"-----------"},{"line_number":20,"context_line":"Running Flask applications in debug mode results in the Werkzeug debugger"}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_6001bdae","line":17,"updated":"2016-01-14 18:14:56.000000000","message":"add title with test id #","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":11029,"name":"Jamie Finnigan","email":"jamiefinnigan@gmail.com","username":"jamiefinnigan"},"change_message_id":"ce379e23bb1a9e00e34ae275c73821c20f40efb0","unresolved":false,"context_lines":[{"line_number":18,"context_line":"Description"},{"line_number":19,"context_line":"-----------"},{"line_number":20,"context_line":"Running Flask applications in debug mode results in the Werkzeug debugger"},{"line_number":21,"context_line":"being enabled. This includes a feature that allows arbitrary code execution."},{"line_number":22,"context_line":"Documentation for both Flask [1]_ and Werkzeug [2]_ strongly suggests that"},{"line_number":23,"context_line":"debug mode should never be enabled on production systems."},{"line_number":24,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_fb46c079","line":21,"updated":"2016-01-14 18:37:40.000000000","message":"I think this documents a different test for Flask being run in debug mode?  Probably need to write some content that address the YAML deserialization issue.","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":25,"context_line":"Operating a production server with debug mode enabled was the probable cause"},{"line_number":26,"context_line":"of the Patreon breach in 2015 [3]_."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Config Options"},{"line_number":29,"context_line":"--------------"},{"line_number":30,"context_line":"None"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Sample Output"},{"line_number":33,"context_line":"-------------"}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_00124109","line":30,"range":{"start_line":28,"start_character":0,"end_line":30,"end_character":4},"updated":"2016-01-14 18:14:56.000000000","message":"remove","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":29,"context_line":"--------------"},{"line_number":30,"context_line":"None"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Sample Output"},{"line_number":33,"context_line":"-------------"},{"line_number":34,"context_line":".. code-block:: none"},{"line_number":35,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_20d5051b","line":32,"range":{"start_line":32,"start_character":1,"end_line":32,"end_character":13},"updated":"2016-01-14 18:14:56.000000000","message":"use Example","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":41,"context_line":"          10    app.run(debug\u003dTrue)"},{"line_number":42,"context_line":"          11"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"References"},{"line_number":45,"context_line":"----------"},{"line_number":46,"context_line":".. [1] http://flask.pocoo.org/docs/0.10/quickstart/#debug-mode"},{"line_number":47,"context_line":".. [2] http://werkzeug.pocoo.org/docs/0.10/debug/"}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_403359ab","line":44,"updated":"2016-01-14 18:14:56.000000000","message":"use seealso","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":43,"context_line":""},{"line_number":44,"context_line":"References"},{"line_number":45,"context_line":"----------"},{"line_number":46,"context_line":".. [1] http://flask.pocoo.org/docs/0.10/quickstart/#debug-mode"},{"line_number":47,"context_line":".. [2] http://werkzeug.pocoo.org/docs/0.10/debug/"},{"line_number":48,"context_line":".. [3] http://labs.detectify.com/post/130332638391/how-patreon-got-hacked-publicly-exposed-werkzeug  # noqa"},{"line_number":49,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_c01f4906","line":46,"updated":"2016-01-14 18:14:56.000000000","message":"indent","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":47,"context_line":".. [2] http://werkzeug.pocoo.org/docs/0.10/debug/"},{"line_number":48,"context_line":".. [3] http://labs.detectify.com/post/130332638391/how-patreon-got-hacked-publicly-exposed-werkzeug  # noqa"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":".. versionadded:: 0.15.0"},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"\"\"\""},{"line_number":53,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_806711b6","line":50,"range":{"start_line":50,"start_character":18,"end_line":50,"end_character":24},"updated":"2016-01-14 18:14:56.000000000","message":"1.0.0","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[{"line_number":65,"context_line":"                    severity\u003dbandit.MEDIUM,"},{"line_number":66,"context_line":"                    confidence\u003dbandit.HIGH,"},{"line_number":67,"context_line":"                    text\u003d\"Use of unsafe yaml load. Allows instantiation of\""},{"line_number":68,"context_line":"                            \" arbitrary objects. Consider yaml.safe_load().\","},{"line_number":69,"context_line":"                    lineno\u003dcontext.node.lineno,"},{"line_number":70,"context_line":"                )"}],"source_content_type":"text/x-python","patch_set":1,"id":"da6ed579_40cef92e","line":68,"range":{"start_line":68,"start_character":28,"end_line":68,"end_character":29},"updated":"2016-01-14 18:14:56.000000000","message":"line up the \" with line above","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"6e012fc931a0fbac409c9b226c16b0d657e51659","unresolved":false,"context_lines":[{"line_number":15,"context_line":"# under the License."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"r\"\"\""},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"B506: Test for use of yaml load"},{"line_number":20,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":21,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"da6ed579_f5fb2845","line":18,"range":{"start_line":18,"start_character":31,"end_line":18,"end_character":36},"updated":"2016-01-14 21:09:15.000000000","message":"remove some \u003d","commit_id":"cea16f75ac156ec050e3a7a117f56316e97d296c"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"6e012fc931a0fbac409c9b226c16b0d657e51659","unresolved":false,"context_lines":[{"line_number":17,"context_line":"r\"\"\""},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"B506: Test for use of yaml load"},{"line_number":20,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"This plugin test checks for the unsafe usage of the ``yaml.load`` function from"},{"line_number":23,"context_line":"the PyYAML package. The yaml.load function provides the ability to construct"}],"source_content_type":"text/x-python","patch_set":2,"id":"da6ed579_95eaec72","line":20,"range":{"start_line":20,"start_character":31,"end_line":20,"end_character":36},"updated":"2016-01-14 21:09:15.000000000","message":"remove some of the \u003d","commit_id":"cea16f75ac156ec050e3a7a117f56316e97d296c"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"6e012fc931a0fbac409c9b226c16b0d657e51659","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":":Example:"},{"line_number":33,"context_line":""},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"    \u003e\u003e Issue: [yaml_load] Use of unsafe yaml load. Allows instantiation of"},{"line_number":36,"context_line":"       arbitrary objects. Consider yaml.safe_load()."},{"line_number":37,"context_line":"       Severity: Medium   Confidence: High"}],"source_content_type":"text/x-python","patch_set":2,"id":"da6ed579_5588f4c4","line":34,"updated":"2016-01-14 21:09:15.000000000","message":"remove this blank line","commit_id":"cea16f75ac156ec050e3a7a117f56316e97d296c"}],"examples/yaml_load.py":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"7209cd8044d025981d3968e430df6953ee51c788","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"da6ed579_403ef98c","line":9,"updated":"2016-01-14 18:14:56.000000000","message":"extra line","commit_id":"83aa9db744490dfc4145b480101b612024ecdbb4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"6e012fc931a0fbac409c9b226c16b0d657e51659","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"da6ed579_f5a9e824","line":9,"updated":"2016-01-14 21:09:15.000000000","message":"remove blank line","commit_id":"cea16f75ac156ec050e3a7a117f56316e97d296c"}]}