1 Commits
Author SHA1 Message Date
vkandBrent Westbrook 538b55873b [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)
Hi :)

## Summary

The S113 docs say it checks `requests` or `httpx` calls that omit
`timeout`, but that hasn't been true for httpx sincee #12213

httpx applies a default timeout, so leaving the argument out is fine
there -- only an explicit `timeout=None` gets reported

In the code the implicit case is only reported when the module is
`requests`

So this rewrites "What it does" & "Why is this bad?" to match what the
rule actually does

Doc comment only, no behaviour change -- closes #27868 

## Test Plan

Ran ruff 0.16.3 over three files:

- `httpx.get(url)` -> nothing reported
- `httpx.get(url, timeout=None)` -> S113, "timeout set to `None`"
- `requests.get(url)` -> S113, "without timeout"

`docs/rules` is generated rather than committed, so there's nothing to
regenerate here

Drafted with AI assistance (Claude Fable 5)

---------

Co-authored-by: Brent Westbrook <36778786+ntBre@users.noreply.github.com>
2026-10-26 17:21:49 +00:00