[QGIS-Developer] Security Scan Issue: Why Can't I no longer do this?
C Hamilton
adenaculture at gmail.com
Tue Sep 22 09:33:31 PDT 2026
What I don't understand is why "except Exception: pass" is even an issue.
Why would it be a critical error? I grew up in the old days of Python
programming so I am sure programmers of today are better at proper
programming, but I used that technique for a purpose and in many cases is
not an error.
The other issue is, I'm retired and I don't have a GIS project. I have
tried to do some minimal maintenance, but I have no real reason to continue
supporting the plugins so when the QGIS checks require that I make some big
changes, I am not sure I am willing to put in the time.
I wouldn't mind if someone would like to take ownership of some of my
plugins (https://plugins.qgis.org/plugins/author/Calvin%20Hamilton/) if
they think they are worthwhile. If I had a fun archaeology or some other
GIS project, it would help keep interest in QGIS. I imagine that I will use
QGIS from time to time, but I am currently doing other things.
On Thu, Sep 17, 2026 at 2:18 AM Richard Duivenvoorde <rdmailings at duif.net>
wrote:
> I see you use de logging module in some of your code. You could at least
> add a logging statement stating "deliberatly 'pass'ing an exception" or so?
>
> (Honestly, having this helped me find an issue some time ago in a
> plugin...)
>
> Regards,
>
> Richard Duivenvoorde
>
> On 9/16/26 19:07, C Hamilton via QGIS-Developer wrote:
> >
> > This is with the Lat Lon Tools plugin. This rule prevented me from
> publishing an updated version. The plugin has been in use since QGIS 2 and
> it doesn't download and run anything.
> >
> > Thanks,
> > Calvin
> >
> > On Wed, Sep 16, 2026 at 12:54 PM Laurențiu Nicola via QGIS-Developer <
> qgis-developer at lists.osgeo.org <mailto:qgis-developer at lists.osgeo.org>>
> wrote:
> >
> > __
> > +1. I don't think it should be up to QGIS to enforce style rules.
> Does it warn if a plugin downloads some code over plain HTTP and runs it?
> That's something I would care about, as a user. I don't care about code
> style, I'll just assume it's awful, vibe-coded (based on recent plugin
> submissions I've looked at), or both.
> >
> > Laurentiu
> >
> > On Wed, Sep 16, 2026, at 19:48, C Hamilton via QGIS-Developer wrote:
> >> Your security scans are causing me problems. Why can't I do the
> following?
> >> try...
> >> except Exception:
> >> pass
> >>
> >> In the try statement, if it fails I don't want it to do anything in
> the exception. This is exactly what I want to happen, but your security
> scans call it a "Critical Error". What should I do instead? I don't need
> any code in the exception.
> >>
> >> Thanks,
> >>
> >> Calvin
> >> _______________________________________________
> >> QGIS-Developer mailing list
> >> QGIS-Developer at lists.osgeo.org <mailto:
> QGIS-Developer at lists.osgeo.org>
> >> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> <https://lists.osgeo.org/mailman/listinfo/qgis-developer>
> >> Unsubscribe:
> https://lists.osgeo.org/mailman/listinfo/qgis-developer <
> https://lists.osgeo.org/mailman/listinfo/qgis-developer>
> >>
> > _______________________________________________
> > QGIS-Developer mailing list
> > QGIS-Developer at lists.osgeo.org <mailto:
> QGIS-Developer at lists.osgeo.org>
> > List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer <
> https://lists.osgeo.org/mailman/listinfo/qgis-developer>
> > Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> <https://lists.osgeo.org/mailman/listinfo/qgis-developer>
> >
> >
> > _______________________________________________
> > QGIS-Developer mailing list
> > QGIS-Developer at lists.osgeo.org
> > List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> > Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20260922/1a6cd88e/attachment-0001.htm>
More information about the QGIS-Developer
mailing list