Developers should not be setting a default argument to an empty list. Instead, use None and check if the value is defined. Using a default list can cause unwanted behavior as the value of the argument is only evaluated once when the function is defined, not when it is run. Because of this, each function call will reference the same underlying memory when the default value is used, which can lead to unwanted behavior.
defnewFunction(arg1,arg2:int,arg3=[],arg4:MyType=[]):# do not use an empty list as a default parameterarg3.append(arg2)arg4.append(arg1)print(arg3,arg4)newFunction('a',1)newFunction('b',2)newFunction('c',3)# Will print:# [1] ['a']# [1, 2] ['a', 'b']# [1, 2, 3] ['a', 'b', 'c']
Compliant Code Examples
defnewFunction(arg1,arg2:int,arg3=None,arg4=None):# do not use an empty list as a default parameterifarg3isNone:arg3=[]ifarg4isNone:arg4=[]arg3.append(arg2)arg4.append(arg1)print(arg3,arg4)newFunction('a',1)newFunction('b',2)newFunction('c',3)# Will print:# [1] ['a']# [2] ['b']# [3] ['c']
원활한 통합. Datadog Code Security 사용해 보기
Datadog Code Security
이 규칙을 사용해 Datadog Code Security로 코드 분석해 보기
이 규칙의 사용법
1
2
rulesets:- python-security # Rules to enforce Python security.
리포지토리 루트에서 위의 콘텐츠를 사용해 static-analysis.datadog.yml 생성
Datadog의 무료 IDE Plugins를 사용하거나 Code Security 스캔을 CI 파이프라인에 추가
