rspec/rules/S4433/python/rule.adoc
2022-02-04 16:28:24 +00:00

46 lines
1.0 KiB
Plaintext

include::../description.adoc[]
== Noncompliant Code Example
[source,python]
----
import ldap
def init_ldap():
connect = ldap.initialize('ldap://example:1389')
connect.simple_bind('cn=root') # Noncompliant
connect.simple_bind_s('cn=root') # Noncompliant
connect.bind_s('cn=root', None) # Noncompliant
connect.bind('cn=root', None) # Noncompliant
----
== Compliant Solution
[source,python]
----
import ldap
import os
def init_ldap():
connect = ldap.initialize('ldap://example:1389')
connect.simple_bind('cn=root', os.environ.get('LDAP_PASSWORD')) # Compliant
connect.simple_bind_s('cn=root', os.environ.get('LDAP_PASSWORD')) # Compliant
connect.bind_s('cn=root', os.environ.get('LDAP_PASSWORD')) # Compliant
connect.bind('cn=root', os.environ.get('LDAP_PASSWORD')) # Compliant
----
include::../see.adoc[]
ifdef::env-github,rspecator-view[]
'''
== Implementation Specification
(visible only on this page)
include::message.adoc[]
include::../highlighting.adoc[]
endif::env-github,rspecator-view[]