Module Expr Str Import alias Import alias Import alias Import alias FunctionDef arguments args defaults body Assign NameStore Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr NameLoad Str Num Expr Call AttributeLoad NameLoad attr Str Str Assign NameStore Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Assign NameStore Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Assign NameStore Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr keyword Str keyword Str keyword Str Assign NameStore Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad AttributeLoad NameLoad attr attr Str Expr Call AttributeLoad AttributeLoad NameLoad attr attr Str Str Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad AttributeLoad AttributeLoad AttributeLoad NameLoad attr attr attr attr Str Expr Call AttributeLoad AttributeLoad AttributeLoad AttributeLoad NameLoad attr attr attr attr Str Str Assign NameStore Call AttributeLoad AttributeLoad AttributeLoad AttributeLoad NameLoad attr attr attr attr Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Assign NameStore Call AttributeLoad AttributeLoad AttributeLoad AttributeLoad NameLoad attr attr attr attr Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str decorator_list
N/A N/A  Example dangerous usage of urllib[2] opener functions

The urllib and urllib2 opener functions and object can open http, ftp,
and file urls. Often, the abilit to open file urls is overlooked leading
to code that can unexpectedly open files on the local server. This
could be used by an attacker to leak information about the server.
 N/A urllib N/A urllib2 N/A urllib.request N/A six test_urlopen N/A N/A N/A N/A N/A url N/A N/A urllib quote file:///bin/ls N/A N/A N/A urllib urlopen url blah 32 N/A N/A N/A urllib urlretrieve file:///bin/ls /bin/ls2 N/A opener N/A N/A urllib URLopener N/A N/A N/A opener open file:///bin/ls N/A N/A N/A opener retrieve file:///bin/ls N/A opener N/A N/A urllib FancyURLopener N/A N/A N/A opener open file:///bin/ls N/A N/A N/A opener retrieve file:///bin/ls N/A handler N/A N/A urllib2 HTTPBasicAuthHandler N/A N/A N/A handler add_password realm test uri http://mysite.com user bob N/A opener N/A N/A urllib2 build_opener handler N/A N/A N/A urllib2 install_opener opener N/A N/A N/A urllib2 urlopen file:///bin/ls N/A N/A N/A urllib2 Request file:///bin/ls N/A N/A N/A N/A urllib request urlopen file:///bin/ls N/A N/A N/A N/A urllib request urlretrieve file:///bin/ls /bin/ls2 N/A opener N/A N/A N/A urllib request URLopener N/A N/A N/A opener open file:///bin/ls N/A N/A N/A opener retrieve file:///bin/ls N/A opener N/A N/A N/A urllib request FancyURLopener N/A N/A N/A opener open file:///bin/ls N/A N/A N/A opener retrieve file:///bin/ls N/A N/A N/A N/A N/A N/A six moves urllib request urlopen file:///bin/ls N/A N/A N/A N/A N/A N/A six moves urllib request urlretrieve file:///bin/ls /bin/ls2 N/A opener N/A N/A N/A N/A N/A six moves urllib request URLopener N/A N/A N/A opener open file:///bin/ls N/A N/A N/A opener retrieve file:///bin/ls N/A opener N/A N/A N/A N/A N/A six moves urllib request FancyURLopener N/A N/A N/A opener open file:///bin/ls N/A N/A N/A opener retrieve file:///bin/ls N/A