Fix issue #574

PyCQA · Apr 16, 2020 · bbe99a8 · bbe99a8
1 parent 8127716
commit bbe99a8
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/bandit/plugins/django_xss.py b/bandit/plugins/django_xss.py
@@ -52,7 +52,8 @@ def is_assigned(self, node):
                     assigned = self.is_assigned_in(node.body)
             else:
                 for withitem in node.items:
-                    if withitem.optional_vars.id == self.var_name.id:
+                    var_id = getattr(withitem.optional_vars, 'id', None)
+                    if var_id == self.var_name.id:
                         assigned = node
                     else:
                         assigned = self.is_assigned_in(node.body)