You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Informational finding TOB-SDW-014 from the 2020 SecureDrop Workstation audit
recommended explicitly checking for and rejecting duplicate JSON keys to
prevent against JSON injection attacks.
The new "json" module is a drop-in replacement for the current usage of
the standard library's JSON module, except using `loads()` will throw
an exception on duplicate keys.
Callers should now catch any ValueErrors, which also covers JSONDecodeError.
Fixes#84.
When I tried to do
make test
, it failed as thexvfb-run
binary was missing. We should update the README.md to tell how to install this package.The text was updated successfully, but these errors were encountered: