>/i)!SrSSKrSSKrSSKJr SSKJr SSKJr SSK J r \R"\ 5r \RSSj5rg) a ============== HTML formatter ============== This formatter outputs the issues as HTML. :Example: .. code-block:: html Bandit Report
Metrics:
Total lines of code: 9
Total lines skipped (#nosec): 0

yaml_load: Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().
Test ID: B506
Severity: MEDIUM
Confidence: HIGH
CWE: CWE-20 (https://cwe.mitre.org/data/definitions/20.html)
File: examples/yaml_load.py
More info: https://bandit.readthedocs.io/en/latest/plugins/yaml_load.html 
    5       ystr = yaml.dump({'a' : 1, 'b' : 2, 'c' : 3})
    6       y = yaml.load(ystr)
    7       yaml.dump(y)
.. versionadded:: 0.14.0 .. versionchanged:: 1.5.0 New field `more_info` added to output .. versionchanged:: 1.7.3 New field `CWE` added to output N)escape) docs_utils)test_properties)utilsc SnSnSnSnSn Sn Sn Sn URX#S 9n [U [5(+nS RS UR 555nU(aU R US 9nOS nS n[ U 5GHunnU(a[U U5S :XaKS n[URUS5RS5RS55nUR US9nOjS nS nU UHNn[URUS5RS5RS55nUU R US9- nMP U R US9n[R"UR5nUUR USURR!53UR"URUR$URUR&UR(UR(R+5UR,UUUUR.S9- nGM U R UR0R2SSUR0R2SSS9nUR UUUS9nU [4R6"U5nUR9U5 UR9U5 SSS5 UR:[<R>R::wa![@RCSUR:5 gg!,(df  NX=f)a"Writes issues to 'fileobj' in HTML format :param manager: the bandit manager object :param fileobj: The output file object, which may be sys.stdout :param sev_level: Filtering severity level :param conf_level: Filtering confidence level :param lines: Number of lines to report, -1 for all a Bandit Report z[ {metrics} {skipped}
{results}
a
{test_name}: {test_text}
Test ID: {test_id}
Severity: {severity}
Confidence: {confidence}
CWE: CWE-{cwe.id}
File: {path}
Line number: {line_number}
More info: {url}
{code} {candidates}
z/ 
{code}
zK

Candidates: {candidate_list}
zX 
{code}
zm
Skipped files:

{files_list}
a!
Metrics:
Total lines of code: {loc}
Total lines skipped (#nosec): {nosec}
) sev_level conf_levelc36# UHupUSUS3v M g7f)z reason: z
N).0fnamereasons P/home/james-whalen/.local/lib/python3.13/site-packages/bandit/formatters/html.py report..Js'2ME '!&.2s) files_listT  )code)candidate_listz issue-sev-)issue_no issue_class test_nametest_id test_textseverity confidencecwecwe_linkpathr candidatesurl line_number_totalslocnosec)r'r()metricsskippedresultsNzHTML output written to file: %s)"get_issue_list isinstancelistjoin get_skippedformat enumeratelen html_escapeget_codestriplstriprget_urlrrlowertesttextrr linkrlinenor)datarwrap_file_objectwritenamesysstdoutLOGinfo)managerfileobjrr lines header_block report_block issue_block code_blockcandidate_blockcandidate_issue skipped_block metrics_blockissuesbaseline skipped_str skipped_text results_strindexissuer# safe_codercandidates_str candidatecandidate_coder$metrics_summaryreport_contents wrapped_files rreportr_sJLX LK"JOOM M # #i # OFfd++H''$002K$++{+C  K!&) u3ve}-2J#ud+11$7>>sCI$$)$4DND#E] !,&&ud399$?FFsK"/"8"8n"8"MM + )//~/NJ  /{))$U^^%9%9%;$<=jjMMjj^^'' YY^^%! *  '*J$** OO  +E 2oo""9-g6+O #)){*O --g6 <(?+  ||szz& 2GLLA' s 49K?? L ))__doc__loggingrBhtmlrr4 bandit.corerrbandit.formattersr getLogger__name__rDaccepts_baseliner_r rrjsN O` &"'# !!!iB"iBri