Commit 46b809a
authored
fix(security): remove insecure SSL verification bypass in dataset downloaders (#1108)
## Summary
- Remove `ssl.CERT_NONE` and `check_hostname = False` bypass for
`plato.asu.edu` URLs in dataset download scripts
- The site has a valid SSL certificate — the bypass was unnecessary and
flagged by SonarQube as 2 Medium-severity vulnerabilities
- Clean up unused `import ssl`
Fixes SonarQube rules `python:S4830` and `python:S5527` (the only 2 open
security vulnerabilities in the report).
## Test plan
- [ ] Run `regression/get_datasets.py` and verify plato.asu.edu
downloads succeed without SSL bypass
- [ ] Run `benchmarks/linear_programming/utils/get_datasets.py` and
verify same1 parent cfa7ce4 commit 46b809a
File tree
2 files changed
+2
-18
lines changed- benchmarks/linear_programming/utils
- regression
2 files changed
+2
-18
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | 8 | | |
10 | 9 | | |
11 | 10 | | |
| |||
632 | 631 | | |
633 | 632 | | |
634 | 633 | | |
635 | | - | |
636 | | - | |
637 | | - | |
638 | | - | |
639 | | - | |
640 | | - | |
641 | | - | |
642 | | - | |
| 634 | + | |
643 | 635 | | |
644 | 636 | | |
645 | 637 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | 8 | | |
10 | 9 | | |
11 | 10 | | |
| |||
824 | 823 | | |
825 | 824 | | |
826 | 825 | | |
827 | | - | |
828 | | - | |
829 | | - | |
830 | | - | |
831 | | - | |
832 | | - | |
833 | | - | |
834 | | - | |
| 826 | + | |
835 | 827 | | |
836 | 828 | | |
837 | 829 | | |
| |||
0 commit comments