Skip to content

Commit

Permalink
Ignoring safety issue 39462 for tornado
Browse files Browse the repository at this point in the history
Details:

* This change ignores the recently created safety issue 39462, because according to
  discussion in tornadoweb/tornado#2981 the CVE against
  tornado that is behind this safety issue, will be closed once a similar CVE
  against Python has been created.

Signed-off-by: Andreas Maier <[email protected]>
  • Loading branch information
andy-maier committed Feb 13, 2021
1 parent 5a1d369 commit c7bde74
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions makefile
Original file line number Diff line number Diff line change
Expand Up @@ -258,6 +258,8 @@ py_src_files := \
# - 38330: Sphinx cannot be upgraded on py27+py34
# - 39194: lxml cannot be upgraded on py34; no issue since HTML Cleaner of lxml is not used
# - 39195: lxml cannot be upgraded on py34; no issue since output file paths do not come from untrusted sources
# - 39462: The CVE for tornado will be replaced by a CVE for Python, see https://github.com/tornadoweb/tornado/issues/2981

safety_ignore_opts := \
-i 38100 \
-i 38834 \
Expand All @@ -270,6 +272,7 @@ safety_ignore_opts := \
-i 38330 \
-i 39194 \
-i 39195 \
-i 39462 \

# Python source files for test (unit test and function test)
test_src_files := \
Expand Down

0 comments on commit c7bde74

Please sign in to comment.