You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Both search and search exports spawn subprocesses to execute curl. In search export, there's no explicit timeout applied to either the curl or the subprocess itself, no return code check, etc. These uses of subprocess.run() and curl should be replaced with a safer mechanism that properly handles the calls and results/cleanup; plenty of formal options exist for implementing the two use cases with a lower level of risk).
Both search and search exports spawn subprocesses to execute
curl
. In search export, there's no explicit timeout applied to either thecurl
or the subprocess itself, no return code check, etc. These uses ofsubprocess.run()
andcurl
should be replaced with a safer mechanism that properly handles the calls and results/cleanup; plenty of formal options exist for implementing the two use cases with a lower level of risk).cadasta-platform/cadasta/search/export/resource.py
Line 55 in bc33ec4
cadasta-platform/cadasta/search/views/async.py
Line 281 in 665d710
The text was updated successfully, but these errors were encountered: