bandit fixes

CrowdStrike · Nov 25, 2022 · 7183a5b · 7183a5b
1 parent de7f8fe
commit 7183a5b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/config/defaults.ini b/config/defaults.ini
@@ -18,6 +18,7 @@ client_id =
 client_secret =
 application_id = fig-default-app-id
 reconnect_retry_count = 36
+rtr_quarantine_keyword = 'infected'
 
 [gcp]
 # Use GOOGLE_APPLICATION_CREDENTIALS env variable

diff --git a/fig/falcon/api.py b/fig/falcon/api.py
@@ -83,7 +83,7 @@ def rtr_fetch_file(self, device_id, filepath):
         import py7zr  # pylint: disable=C0415
 
         flo = io.BytesIO(z7pack)
-        with py7zr.SevenZipFile(flo, password='infected') as archive:
+        with py7zr.SevenZipFile(flo, password=config.get('falcon', 'rtr_quarantine_keyword')) as archive:
             content = archive.readall()
             if len(content) != 1:
                 raise ApiError('Cannot extract RTR file from 7z')