Skip to content

Commit e8b758d

Browse files
committed
Suppress S5332 hotspot on the deliberate http/https allow-list
The HTTP action allow-lists exactly http and https and rejects any other scheme; plain http is required for internal/localhost automation targets. Mark the reviewed clear-text-protocol hotspot with an inline NOSONAR justification (the repo's established suppression convention).
1 parent 141b7ce commit e8b758d

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

‎je_auto_control/utils/http_client/http_client.py‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,9 @@
1313
import urllib.request
1414
from typing import Any, Dict, Mapping, Optional
1515

16-
_ALLOWED_SCHEMES = ("http://", "https://")
16+
# NOSONAR python:S5332 — http is allow-listed deliberately (other schemes
17+
# are rejected); plain http is required for internal/localhost endpoints.
18+
_ALLOWED_SCHEMES = ("http://", "https://") # NOSONAR python:S5332
1719
_DEFAULT_TIMEOUT = 30.0
1820

1921

0 commit comments

Comments
 (0)