Are insecure code completions a vulnerability?

Three months ago I saw that PyCharm shipped with a “ Full Line Completion ” plugin that “uses a local deep learning model to suggest entire lines of code”. These suggestions manifest as whole-line suggestions after you start typing and can be accepted with Tab . Essentially auto-complete for entire lines. I decide to test this functionality. I started by writing import urllib3 , created a new line, and then typed u and received a suggested completion for the line marked below with a dashed border . I was no

添加评论
点赞收藏
点踩分享查看原文
评论
?
参与讨论