Hardening suggestions for python-security / safe_urlopen

pyproject.toml

@@ -13,6 +13,7 @@ description = "The security toolkit for the Python community"
 keywords = ["security", "appsec"]
 dependencies = [
     "requests",
+    "security==1.2.1",
 ]
 
 [project.urls]

src/security/safe_requests/api.py

@@ -1,7 +1,7 @@
 from urllib.parse import urlparse
 from urllib.request import urlopen as unsafe_urlopen
 
-from requests import get as unsafe_get
+from security.safe_requests import get as unsafe_get
 from requests import post as unsafe_post
 
 from security.exceptions import SecurityException
@@ -58,7 +58,7 @@ def get(
     **kwargs,
 ):
     UrlParser(url).check(allowed_protocols, host_validator)
-    return unsafe_get(url, params=params, **kwargs)
+    return unsafe_get(url, params=params, **kwargs, timeout=60)
 
 
 def post(
@@ -70,4 +70,4 @@ def post(
     **kwargs,
 ):
     UrlParser(url).check(allowed_protocols, host_validator)
-    return unsafe_post(url, data=data, json=json, **kwargs)
+    return unsafe_post(url, data=data, json=json, **kwargs, timeout=60)