The ftplib module for FTP (insecure plaintext protocol). FTP() connects unencrypted; FTP_TLS is the secure variant. Any use of the plain FTP class is a finding for sensitive data flows.
.FTP_TLS().FTP().FTP()Sinkftplib.FTP(host='', user='', passwd='', acct='', timeout=...) -> FTP
Opens a plaintext FTP session. Finding — credentials transmitted unencrypted.
.FTP_TLS()Sanitizerftplib.FTP_TLS(host='', user='', passwd='', ...) -> FTP_TLS
Opens an FTPS session. Secure replacement.
return| FQN | Field | |
|---|---|---|
| ftplib | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyFtplib