From 3ad301e3488a63b31848ccfaa32ec4c2278524df Mon Sep 17 00:00:00 2001 From: "pixeebot[bot]" <104101892+pixeebot[bot]@users.noreply.github.com> Date: Thu, 25 Apr 2024 14:25:31 +0000 Subject: [PATCH 1/2] Add timeout to `requests` calls --- src/security/safe_requests/api.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/security/safe_requests/api.py b/src/security/safe_requests/api.py index 826e1a2..6d44e41 100644 --- a/src/security/safe_requests/api.py +++ b/src/security/safe_requests/api.py @@ -58,7 +58,7 @@ def get( **kwargs, ): UrlParser(url).check(allowed_protocols, host_validator) - return unsafe_get(url, params=params, **kwargs) + return unsafe_get(url, params=params, **kwargs, timeout=60) def post( @@ -70,4 +70,4 @@ def post( **kwargs, ): UrlParser(url).check(allowed_protocols, host_validator) - return unsafe_post(url, data=data, json=json, **kwargs) + return unsafe_post(url, data=data, json=json, **kwargs, timeout=60) From 8d48a3724dd33effc34e2cf3ad6975e5b041c152 Mon Sep 17 00:00:00 2001 From: "pixeebot[bot]" <104101892+pixeebot[bot]@users.noreply.github.com> Date: Thu, 25 Apr 2024 14:25:31 +0000 Subject: [PATCH 2/2] Sandbox URL Creation --- pyproject.toml | 1 + src/security/safe_requests/api.py | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 345b61e..c4da3b6 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -13,6 +13,7 @@ description = "The security toolkit for the Python community" keywords = ["security", "appsec"] dependencies = [ "requests", + "security==1.2.1", ] [project.urls] diff --git a/src/security/safe_requests/api.py b/src/security/safe_requests/api.py index 6d44e41..bb91f95 100644 --- a/src/security/safe_requests/api.py +++ b/src/security/safe_requests/api.py @@ -1,7 +1,7 @@ from urllib.parse import urlparse from urllib.request import urlopen as unsafe_urlopen -from requests import get as unsafe_get +from security.safe_requests import get as unsafe_get from requests import post as unsafe_post from security.exceptions import SecurityException