Allow select_autoescape to be an attribute (i.e. jinja2.select_autoes…

…cape)
PyCQA · Mar 25, 2019 · addccf9 · addccf9
1 parent a975e63
commit addccf9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/bandit/plugins/jinja2_templates.py b/bandit/plugins/jinja2_templates.py
@@ -110,6 +110,9 @@ def jinja2_autoescape_false(context):
                         elif isinstance(value, ast.Call) and getattr(
                                 value.func, 'id', None) == 'select_autoescape':
                             return
+                        elif isinstance(value, ast.Call) and getattr(
+                                value.func, 'attr', None) == 'select_autoescape':
+                            return
                         else:
                             return bandit.Issue(
                                 severity=bandit.HIGH,