diff --git a/package_linter.py b/package_linter.py index 9f73713..8d5ace1 100755 --- a/package_linter.py +++ b/package_linter.py @@ -1543,18 +1543,17 @@ class Configurations(TestSuite): yield Warning("Can't open/read %s: %s" % (filename, e)) return - for line in content.split("\n"): - comment = ["#", "//", ";"] + for number, line in enumerate(content.split("\n"), 1): + comment = ("#", "//", ";") if ( - "0.0.0.0" in line - or "::" in line + ( "0.0.0.0" in line or "::" in line ) and not line.strip().startswith(comment) ): yield Info( - "%s: Binding to '0.0.0.0' or '::' can result in a security issue as " - "the SSO can be bypassed by knowing a public IP (typically an IPv6) " - "and the app port. Please be sure that this behavior is intentional.\n" - "Maybe use '127.0.0.1' or '::1' instead." % filename + f"{filename}:{number}: Binding to '0.0.0.0' or '::' can result in " + "a security issue as the SSO can be bypassed by knowing a public " + "IP (typically an IPv6) and the app port. Please be sure that this " + "behavior is intentional. Maybe use '127.0.0.1' or '::1' instead." ) #############################################