ansible/flaskpaste
1
0
Fork 0
forked from claw/flaskpaste
Code Pull Requests Activity

fix: use nosec for bandit SQL injection suppression

Browse Source
This commit is contained in:
Username
2025-12-23 22:53:52 +01:00
parent 482bd9a152
commit 2a287c65f4
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/audit.py
View File

@@ -143,7 +143,7 @@ def query_audit_log(
# Get total count
count_row = db.execute(
f"SELECT COUNT(*) as total FROM audit_log WHERE {where_sql}", # noqa: S608
f"SELECT COUNT(*) as total FROM audit_log WHERE {where_sql}", # nosec B608
params,
).fetchone()
total = count_row["total"] if count_row else 0
@@ -155,7 +155,7 @@ def query_audit_log(
FROM audit_log
WHERE {where_sql}
ORDER BY timestamp DESC
LIMIT ? OFFSET ?""", # noqa: S608
LIMIT ? OFFSET ?""", # nosec B608
[*params, limit, offset],
).fetchall()