Is a
Product attributes
Launch Date
2019
Product Parent Company
Other attributes
Source Code
Bento is an open source static program analysis package released by San Francisco-based startup r2c. Bento runs specialty checks against Flask and Django code, and code written for related Python packages like Requests.
Specialty checks
Bento includes specialty checks for Python web apps and open source checks for Python, Docker, and shell files.
Flask checks
- Missing JWT decorators
- Secure set cookie
- Proper use of send file open
- Unescaped file extension
- Use blueprint for modularity
- Use jsonify
Django checks
- Avoid NULL for string fields
- Set string field to avoid constraint violations
- Open redirect
- Use DecimalField for currency
- Use JsonResponse
- Use .count() instead of len()
- Avoid raw SQL queries
Jinja checks
- Missing noopener
- Missing CSRF protection
- Missing noreferrer
- Unquoted attribute value
- Missing meta content type
- Missing meta charset
- Missing doctype
Requests checks
- Use scheme
- No auth over http
- Use timeout
Boto 3 checks
- Hardcoded access token
Click checks
- Launch uses literal
- Parameter matching in 'click.option'
Timeline
No Timeline data yet.
