python-s5439-html-autoescape-disabled-mining
Read-only mining codemod for python:S5439: HTML autoescape mechanism should not be globally disabled.
Emits python_security_finding metric rows with blocking severity. Source files are never modified.
Rule
- ID:
python:S5439 - Severity: blocking
- Remediation: Keep HTML autoescaping enabled in templating engines
Usage
bash
Development
bash