SafeURL-Python

v1.3

SafeURL is a library that aids developers in protecting against a class of vulnerabilities known as Server Side Request Forgery. For more information about how to use this package see README

Latest version published 11 months ago

License: MIT

PyPI

GitHub

Package Health Score

24 / 100

security
Security issues found
popularity
Limited
maintenance
Inactive
community
Limited

Explore Similar Packages

load
49

Popularity

Limited

GitHub Stars: 11
Forks: 4
Contributors: 4

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package SafeURL-Python, we found that it has been starred 11 times.

Security

Security issues found

Security and license risk for latest version

Release Date: Jun 23, 2023
Direct Vulnerabilities: 0
C
0
H
1
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

MIT

Security Policy

Yes

Snyk detected that the latest version of SafeURL-Python has a security vulnerability.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Inactive

archived

Commit Frequency

Open Issues: 1
Open PR: 0
Last Release: 11 months ago
Last Commit: 11 months ago

Further analysis of the maintenance status of SafeURL-Python based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

We found that SafeURL-Python demonstrates a positive version release cadence with at least one new version released in the past 12 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Community

Limited

Readme: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 4
Funding: No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like SafeURL-Python is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: Unspecified

Age: 8 years
Latest Release: 11 months ago
Dependencies: 2 Direct / 2 Total
Versions: 3
Maintainers: 1
Wheels: OS Independent

Readme

SafeURL for Python

Ported by @nicolasrod and docs by @momopranto

Overview

SafeURL is a library that aids developers in protecting against a class of vulnerabilities known as Server Side Request Forgery (SSRF). It does this by validating each part of the URL against a configurable white or black list before making an HTTP request. SafeURL is open-source and licensed under MIT.

Note that for mitigating SSRF vulnerabilities, we first recommend routing outbound requests from your infrastructure through a proxy such as Smokescreen. Alternately, ensure that all services which can make outbound requests to potentially user-controlled URLs are firewalled from talking to other internal hosts. Application-layer defences such as this library should only be used if those options are not practical. Please see our blog post for further information.

Installation

Clone this repository and import it into your project.

Implementation

SafeURL serves as a replacement wrapper for PyCurl in Python.

try:
  #User controlled input
  url = request.args['url']
  su = safeurl.SafeURL()
  #Execute using SafeURL
  res = su.execute(url)
except:
  print "Unexpected error:", sys.exc_info()
  #URL wasn't safe

Configuration

Options such as white and black lists can be modified. For example:

try:
    su = safeurl.SafeURL()
    #Create an options object
    opt = safeurl.Options()
    opt.clearList("whitelist")
    opt.clearList("blacklist")
    #Allow requests to specific domains
    opt.setList("whitelist", ["google.com", "youtube.com"], "domain")
    #Restrict urls with the ftp scheme
    opt.setList("blacklist",["ftp"],"scheme")

    su.setOptions(opt)
    res = su.execute("http://www.youtube.com")
except:
    print "Unexpected error:", sys.exc_info()

SafeURL-Python dependencies

netaddr pycurl

FAQs

What is SafeURL-Python?

SafeURL is a library that aids developers in protecting against a class of vulnerabilities known as Server Side Request... Visit Snyk Advisor to see a full health score report for SafeURL-Python, including popularity, security, maintenance & community analysis.

Is SafeURL-Python popular?

The python package SafeURL-Python receives a total of 209 weekly downloads. As such, SafeURL-Python popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is SafeURL-Python well maintained?

We found indications that SafeURL-Python is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is SafeURL-Python safe to use?

Security issues were found while scanning the latest version of SafeURL-Python, and a total of 1 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 6 May-2024, at 11:07 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP