Rename blacklist to banlist within internal modules and documentation

[tonybaloney]

This proposed change replaces the use of the term "blacklist" with a replacement, "banlist".

The change is mostly an internal refactoring task.

Some notes:

• I have added a backward-compatibility check in the configuration loader that will patch all "blacklist" settings to "banlist".
• If the user already has files that configure using the blacklist keyword, it will continue to work.
• The documentation would use blocklist and not refer to blacklist at all

Could the core development team please comment on this proposal?

I would gladly make amendments, continue and extend the testing to have this change merged as I believe it would benefit the Python community not to use the term blacklist in such an important project as bandit.

@ericwb @lukehinds @ehooo @viraptor

[ehooo]

what is it?

[tonybaloney]

oops. that was unrelated to this PR.

[ehooo]

Please fix the test,
I see that convert_blacklist_to_banlist is pending to be implemented, however I think it is important for allows retrocompatibility.

[tonybaloney]

@ehooo this is now ready for a proper review.

There are tests against legacy configs as well

[ehooo]

For me is fine, however, I cannot merge it.
@ericwb @lukehinds @viraptor could you review?

[ericwb]

This change breaks the extension model via the rename. Therefore it needs to go through a deprecation of sorts. It should still support the extension of 'blacklist' in addition to 'banlist' for a few releases before totally removing in order to give exploiters time to migrate off that extension name. And a warning message to 'blacklist' plugins would also be good.

[tonybaloney]

@ericwb I added some logic to load and merge the old namespace and raise a PendingDeprecationWarning if that namespace has values

https://github.com/PyCQA/bandit/pull/627/files#diff-84fa5c2b26f1476808885d6e44c73f40R74-R85

[ericwb]

Thanks! Few more changes needed.

[tonybaloney]

@ericwb the requested changes were made

[jwstein3400]

Hi. I unknowingly opened a separate issue and pushed a change under #647
I would be happy to repush my proposed change with banlist instead of blocklist.

[tonybaloney]

@jwstein3400 I don't mind what its called, as long as its changed from the current terminology. Happy to close this one or you can merge any changes from here into your branch. I'm just waiting for one of the maintainers to review and merge.

[KOLANICH]

banlist is not a very correct term. The things that are in blacklists are not technically banned, but just warned about by bandit.

IMHO it is the campaign of replacement of neutral terms with the words white and black racist (we in Russia have an idiom that can literaly be translated into English as "the thief has his hat burning", usually attributed to a folk story about an improvised guilty-knowledge test to detect thieves in a crowd at market and meaning the situation when someone socially inacceptable (i.e. the thief from the story) trying to play innocent (in the story it'd be to just ignore the scream, rather that touching the hat) but fails because he is a bad in acting), not the practice of using the words being replaced.

[za]

IMHO it is the campaign of replacement of neutral terms with the words white and black racist

What about using allowlist and blocklist term to replace whitelist and blacklist? @tonybaloney

cc: @KOLANICH

[KOLANICH]

As I have said, I think that the whole this campaign of renaming neutral things into "more neutral" is lot of useless fuzz out of nothing and is not so smart. I.e. they have renamed master branch into main only because one of the meanings of the word "master" is "slave-owner". To be consistent they now would have to rename Master of Sciences into "Main of Sciences" ;)

[tonybaloney]

Closing PR. Have had no reply from maintainers of the project and the PR is now wildly out of date/conflicting with main branch