Terralego/django-template-engines

Potential XSS on mark_safe function.

Open

        return mark_safe(ODT_IMAGE.format(full_name, width, height,
                                          anchor or "paragraph", f"image/{extension.lower()}"))

• Exclude checks
  • Disable engine
  • Disable check

Standard pseudo-random generators are not suitable for security/cryptographic purposes.

Open

        ol_tag.attrs['xml:id'] = f'list{str(random.randint(100000000000000000, 900000000000000000))}'

• Exclude checks
  • Disable engine
  • Disable check

Use of mark_safe() may expose cross-site scripting vulnerabilities and should be reviewed.

Open

    return mark_safe(str(soup))

• Exclude checks
  • Disable engine
  • Disable check

Use of mark_safe() may expose cross-site scripting vulnerabilities and should be reviewed.

Open

        return mark_safe(ODT_IMAGE.format(full_name, width, height,
                                          anchor or "paragraph", f"image/{extension.lower()}"))

• Exclude checks
  • Disable engine
  • Disable check

Standard pseudo-random generators are not suitable for security/cryptographic purposes.

Open

        ul_tag.attrs['xml:id'] = f'list{str(random.randint(100000000000000000, 900000000000000000))}'

• Exclude checks
  • Disable engine
  • Disable check

Use of mark_safe() may expose cross-site scripting vulnerabilities and should be reviewed.

Open

        return mark_safe(ODT_IMAGE.format(full_name, width, height, anchor or "paragraph",
                                          f"image/{extension.lower()}"))

• Exclude checks
  • Disable engine
  • Disable check

Potential XSS on mark_safe function.

Open

    return mark_safe(str(soup))

• Exclude checks
  • Disable engine
  • Disable check

Potential XSS on mark_safe function.

Open

        return mark_safe(ODT_IMAGE.format(full_name, width, height, anchor or "paragraph",
                                          f"image/{extension.lower()}"))

• Exclude checks
  • Disable engine
  • Disable check

File odt_tags.py has 267 lines of code (exceeds 250 allowed). Consider refactoring.

Open

import base64
import logging
import random
import re
import secrets

Function __init__ has 6 arguments (exceeds 4 allowed). Consider refactoring.

Wontfix

    def __init__(self, url, data=None, request=None, max_width=None,