T09 · Insecure Skill Coding Practices
Error
- Location
helpers/n8n_client.py:14- Finding
Authenticated requests permit cleartext HTTP and insufficiently constrained redirects
- Content
View full analysis
str: return f"{self.base_url}/api/v1/{path.lstrip('/')}" def get(self, path: str, params: Optional[dict] = None) -> Any: resp = requests.get(self._url(path), headers=self._headers, params=params) resp.raise_for_status() return resp.json() if resp.content else None def post(self, path: str, body: Any = None) -> Any: resp = requests.post(self._url(path), headers=self._headers, json=body) resp.raise_for_status() return resp.json() if resp.content else None def put(self, path: str, body: Any) -> Any: resp = requests.put(self._url(path), headers=self._headers, json=body) resp.raise_for_status() return resp.json() if resp.content else None def delete(self, path: str) -> Any: resp = requests.delete(self._url(path), headers=self._headers) resp.raise_for_status() return resp.json() if resp.content else None ``` `helpers/cleanup_queue_state.py:29-35`: ```python def _upstash_call(base_url: str, token: str, cmd: list) -> dict: resp = requests.post( base_url.rstrip("/") + "/", headers={"Authorization": f"Bearer {token}"}, json=cmd, ) resp.raise_for_status() return resp.json() ``` `helpers/run.py:31-49`: ```python ...[truncated 3171 chars]- Remediation
View remediation