Aalexbit-codemod

python-s5439-html-autoescape-disabled-mining

Mine python:S5439: HTML autoescape mechanism should not be globally disabled; read-only metrics with blocking severity

miningmetricspythonsecuritypython:S5439
Public
0 executions

Run locally

npx codemod python-s5439-html-autoescape-disabled-mining

python-s5439-html-autoescape-disabled-mining

Read-only mining codemod for python:S5439: HTML autoescape mechanism should not be globally disabled.

Emits python_security_finding metric rows with blocking severity. Source files are never modified.

Rule

  • ID: python:S5439
  • Severity: blocking
  • Remediation: Keep HTML autoescaping enabled in templating engines

Usage

bash

Development

bash

Ready to contribute?

Build your own codemod and share it with the community.