Moving CWE-390 code example to GitHub as part of ossf#531

Signed-off-by: Helge Wehder <[email protected]>

docs/Secure-Coding-Guide-for-Python/CWE-703/CWE-390/compliant01.py

@@ -0,0 +1,20 @@
+# SPDX-FileCopyrightText: OpenSSF project contributors
+# SPDX-License-Identifier: MIT
+""" Compliant Code Example """
+from time import sleep
+
+
+def exception_example():
+    """Compliant Code Example catching a specific exception"""
+    while True:
+        sleep(1)
+        try:
+            _ = 1 / 0
+        except ZeroDivisionError:
+            print("How is it now?")
+
+
+#####################
+# exploiting above code example
+#####################
+exception_example()

docs/Secure-Coding-Guide-for-Python/CWE-703/CWE-390/compliant02.py

@@ -0,0 +1,28 @@
+# SPDX-FileCopyrightText: OpenSSF project contributors
+# SPDX-License-Identifier: MIT
+""" Compliant Code Example """
+
+from pathlib import Path
+
+
+def exception_example(args: list):
+    """Compliant code demonstrating a simplistic handling.
+    input validation or architectural are not demonstrated.
+    """
+    file_exists = False
+    path = Path(Path.home(), args[0])
+    while not file_exists:
+        try:
+            file_handle = open(path, "r", encoding="utf-8")
+            file_exists = True
+            print(file_handle.readlines())
+        except FileNotFoundError:
+            print(f"Unable to find file '{path.name}'")
+            filename = input("Please provide a valid filename: ")
+            path = Path(Path.home(), filename)
+
+
+#####################
+# exploiting above code example
+#####################
+exception_example(["goblegoblegoble"])

docs/Secure-Coding-Guide-for-Python/CWE-703/CWE-390/noncompliant01.py

@@ -0,0 +1,21 @@
+# SPDX-FileCopyrightText: OpenSSF project contributors
+# SPDX-License-Identifier: MIT
+""" Non-compliant Code Example """
+
+from time import sleep
+
+
+def exception_example():
+    """Non-compliant Code Example using bare except"""
+    while True:
+        try:
+            sleep(1)
+            _ = 1 / 0
+        except:
+            print("Don't care")
+
+
+#####################
+# exploiting above code example
+#####################
+exception_example()

docs/Secure-Coding-Guide-for-Python/CWE-703/CWE-390/noncompliant02.py

@@ -0,0 +1,22 @@
+# SPDX-FileCopyrightText: OpenSSF project contributors
+# SPDX-License-Identifier: MIT
+""" Non-compliant Code Example """
+
+import logging
+from pathlib import Path
+
+
+def exception_example(args: list):
+    """Non-compliant Code Example missing handling"""
+    file_path = Path(Path.home(), args[0])
+    try:
+        file_handle = open(file_path, "r", encoding="utf-8")
+        _ = file_handle.readlines()
+    except Exception as exception:
+        logging.exception(exception)
+
+
+#####################
+# exploiting above code example
+#####################
+exception_example(["goblegoblegoble"])