Issues - joystick - Pagure.io

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.

joystick

Issues
1 Open 10 Closed

#12 Feedback from master branch review

3

Opened Jun 17, 2019 by sinnykumari. Modified Jun 25, 2019

#10 [secaudit,blocking] Code incomplete: security audit cannot be completed

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#9 [secaudit,blocking] The source image location is fully trusted from the message

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#8 [secaudit,info] Perhaps reconsider the log level for UnsupportedComposeError

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#7 [secaudit,info] Topics are being compared by endswith, which may catch more than intended

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#6 [secaudit,info] subprocess.Popen used where subprocess.run could be used

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#5 [secaudit,blocking] subprocess output used as-is to log without being interpreted

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#4 [secaudit,info] subprocess with explicit default

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#3 [secaudit,blocking] subprocess is called with flattening of command

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#2 [secaudit,info] subprocess with stdin PIPE without communication inwards

1

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

#1 [secaudit,blocking,bandit] subprocess with `shell=True`

2

Opened Jun 4, 2019 by puiterwijk. Modified Jun 19, 2019

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.