Feature db connector solr synonyms api - #1918
Conversation
* init * some unit tests * fix marshmallow load * unit tests * gunicorn config * restore var * clean up build * attempt to fix CI
* init * some unit tests * fix marshmallow load * unit tests * gunicorn config * restore var * clean up build * attempt to fix CI * put back gunicorn config
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| designation_rx = re.compile(r'({0})|{1}'.format(exception_designation_rx, ws_generic_rx), re.I) | ||
| exception_designation_rx = "|".join(map(re.escape, exception_designation)) | ||
| ws_generic_rx = r"(?<![a-zA-Z0-9_.])({0})\s*([ &/.-])\s*([A-Za-z]+)".format(prefixes) | ||
| designation_rx = re.compile(r"({0})|{1}".format(exception_designation_rx, ws_generic_rx), re.I) |
Check failure
Code scanning / CodeQL
Regular expression injection High
| text = re.sub( | ||
| r"(?<=[a-zA-Z\.])\'[Ss]|\(.*\d+.*\)|\(?No.?\s*\d+\)?|\(?lot.?\s*\d+[-]?\d*\)?", | ||
| "", | ||
| text, |
Check failure
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
| text = re.sub( | ||
| r"(\b[A-Za-z]{1,2}\b)\s+(?=[a-zA-Z]{1,2}\b)|\s+$", | ||
| r"\1", | ||
| text, |
Check failure
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
| def remove_french(text): | ||
| text = re.sub(r'(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?', | ||
| r'\1 ', | ||
| text = re.sub(r"(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?", |
Check failure
Code scanning / CodeQL
Inefficient regular expression High
| def remove_french(text): | ||
| text = re.sub(r'(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?', | ||
| r'\1 ', | ||
| text = re.sub(r"(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?", |
Check failure
Code scanning / CodeQL
Inefficient regular expression High
| def remove_french(text): | ||
| text = re.sub(r'(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?', | ||
| r'\1 ', | ||
| text = re.sub(r"(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?", |
Check failure
Code scanning / CodeQL
Inefficient regular expression High
| def remove_french(text): | ||
| text = re.sub(r'(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?', | ||
| r'\1 ', | ||
| text = re.sub(r"(^\w+(?:[^\w\n]+\w+)+[^\w\n]*)/(\w+(?:[^\w\n]+\w+)+[^\w\n]*$)?", |
Check failure
Code scanning / CodeQL
Inefficient regular expression High
|
| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
|---|---|---|---|---|---|
| 9442085 | Triggered | Generic Password | ab5d5c3 | solr-synonyms-api/config.py | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secret safely. Learn here the best practices.
- Revoke and rotate this secret.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
|
2 participants
Issue #, if available:
Description of changes:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the namex license (Apache 2.0).