TPTBusiness a5f091f1ca fix(security): nosec for B608/B701 false positives in UI and template code ...

B608: Bandit flags any f-string containing "select" as potential SQL
injection. All four cases (app.py, ds_trace.py, llm_st.py, merge.py)
are Streamlit UI labels or log messages — not database queries.

B701: Jinja2 autoescape=False warnings in coder.py and utils.py are
false positives — these render Python code and plain-text templates,
not HTML. Enabling autoescape would corrupt the rendered code.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-30 09:35:09 +02:00

..

app.py

fix(security): nosec for B608/B701 false positives in UI and template code

2026-04-30 09:35:09 +02:00

ds_trace.py

fix(security): nosec for B608/B701 false positives in UI and template code

2026-04-30 09:35:09 +02:00

llm_st.py

fix(security): nosec for B608/B701 false positives in UI and template code

2026-04-30 09:35:09 +02:00