Skip to content

pyscg-0009 - addressing issues described in #1053#1095

Open
s19110 wants to merge 9 commits into
ossf:mainfrom
s19110:issue_1053_pyscg_0009
Open

pyscg-0009 - addressing issues described in #1053#1095
s19110 wants to merge 9 commits into
ossf:mainfrom
s19110:issue_1053_pyscg_0009

Conversation

@s19110
Copy link
Copy Markdown
Contributor

@s19110 s19110 commented May 2, 2026

I have added a new compliant code example that corresponds to noncompliant01.py, changed noncompliant02.py to include an attack for Windows OS, and changed the wording in the README to reflect the new changes.

this is to address #1053

s19110 added 2 commits May 2, 2026 12:21
Signed-off-by: s19110 <hubertdan24@gmail.com>
Signed-off-by: s19110 <hubertdan24@gmail.com>
@s19110
Copy link
Copy Markdown
Contributor Author

s19110 commented May 2, 2026

Because I had to rename the original compliant01.py, git diff might be confusing. I have pushed the new code example as a separate commit, so you can see the changes to the original compliant01.py (that is now compliant02.py) by looking only at the first commit in this PR.

Signed-off-by: s19110 <hubertdan24@gmail.com>
Copy link
Copy Markdown
Contributor

@BartKaras1128 BartKaras1128 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a few comments, looks good besides that!

Comment thread docs/Secure-Coding-Guide-for-Python/04_neutralization/pyscg-0009/README.md Outdated
Comment thread docs/Secure-Coding-Guide-for-Python/04_neutralization/pyscg-0009/compliant01.py Outdated
Comment thread docs/Secure-Coding-Guide-for-Python/04_neutralization/pyscg-0009/README.md Outdated
Comment thread docs/Secure-Coding-Guide-for-Python/04_neutralization/pyscg-0009/README.md Outdated
Comment thread docs/Secure-Coding-Guide-for-Python/04_neutralization/pyscg-0009/README.md Outdated
Comment thread docs/Secure-Coding-Guide-for-Python/04_neutralization/pyscg-0009/README.md Outdated
Copy link
Copy Markdown
Contributor

@myteron myteron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

first examples have nonmatching exploit sections.
2nd example is using cmd /c on windows, I provided an alternative code example using a powershell command that acts similar in windows to find . -exec in linux.

s19110 and others added 6 commits May 23, 2026 17:08
…09/README.md

Co-authored-by: Bartlomiej Karas <moezarts@gmail.com>
Signed-off-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com>
…09/README.md

Co-authored-by: Bartlomiej Karas <moezarts@gmail.com>
Signed-off-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com>
…09/README.md

Co-authored-by: Bartlomiej Karas <moezarts@gmail.com>
Signed-off-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com>
…09/compliant01.py

Co-authored-by: Bartlomiej Karas <moezarts@gmail.com>
Signed-off-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com>
…09/README.md

Co-authored-by: Bartlomiej Karas <moezarts@gmail.com>
Signed-off-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com>
Signed-off-by: Hubert Daniszewski <61824500+s19110@users.noreply.github.com>
@s19110
Copy link
Copy Markdown
Contributor Author

s19110 commented May 23, 2026

Thank you @myteron and @BartKaras1128 for the reviews! I have made changes to this PR to include your suggestions.

@myteron, I couldn't find the powershell command you mentioned in your comment. Could you please send it to me in another comment or suggestion?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants