Aalexbit-codemod

pythonenterprise-s8435-sensitive-url-query-mining

Mine pythonenterprise:S8435: Sensitive data should not be passed in URL query parameters; read-only metrics with blocking severity

miningmetricspythonsecuritypythonenterprise:S8435
Public
0 executions
Apply to Repository

Run locally

npx codemod pythonenterprise-s8435-sensitive-url-query-mining

pythonenterprise-s8435-sensitive-url-query-mining

Read-only mining codemod for pythonenterprise:S8435: Sensitive data should not be passed in URL query parameters.

Emits python_security_finding metric rows with blocking severity. Source files are never modified.

Rule

  • ID: pythonenterprise:S8435
  • Severity: blocking
  • Remediation: Pass sensitive values in request bodies or headers instead of query strings

Usage

bash

Development

bash

Ready to contribute?

Build your own codemod and share it with the community.

Publish a codemodJoin the community