From 989e826b34a3d6ad2cfa76c70ccfc8351e69169d Mon Sep 17 00:00:00 2001 From: Christian Manivong Date: Fri, 23 Oct 2026 08:47:56 +0200 Subject: [PATCH] fix: what bandit and the remaining lint rules found - get_route_to: "0.0.0.0" and "::" are the unspecified next hop of an on-link route as the host reports it, not an address anything binds to (nosec B104). --- napalm_windows/windows.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/napalm_windows/windows.py b/napalm_windows/windows.py index 4f85b02..3f31a62 100644 --- a/napalm_windows/windows.py +++ b/napalm_windows/windows.py @@ -464,7 +464,8 @@ class WindowsDriver(OSDriver): if protocol and proto != protocol.lower(): continue next_hop = r.get("next_hop") or "" - if next_hop in ("0.0.0.0", "::"): + # The unspecified next hop of an on-link route, read from the host; nothing binds. + if next_hop in ("0.0.0.0", "::"): # nosec B104 next_hop = "" routes.setdefault(network, []).append( {