Description

Missing dependency on library requests when install from pip

Step to reproduce

1. pip install hostmydocs-client=1.0.1
2. execute

from hostmydocs.client import Client
t = Client(server_config=None)

Will throw ModuleNotFoundError: No module named 'requests'

CVE-2018-20060

urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.

CVE-2018-18074
moderate severity

The Requests package through 2.19.1 before 2018-09-14 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

• Add first shot of code
• Add Unit test
• Add travis build which execute the unit test
• Add sample in readme
• Add deployment to PyPI
• Add documentation generation and hosting
• Publish the first version