hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 19:55:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add file-like modeling to werkzeug FileStorage

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-07-20 11:09:02 +02:00
parent 5f5c0b11c7
commit 04190ea308
2 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/test/library-tests/frameworks/flask/taint_test.py
View File

@@ -70,6 +70,8 @@ def test_taint(name = "World!", number="0", foo="foo"): # $requestHandler route
request.files['key'], # $ tainted
request.files['key'].filename, # $ MISSING: tainted
request.files['key'].stream, # $ MISSING: tainted
request.files['key'].read(), # $ MISSING: tainted
request.files['key'].stream.read(), # $ MISSING: tainted
request.files.get('key'), # $ tainted
request.files.get('key').filename, # $ MISSING: tainted
request.files.get('key').stream, # $ MISSING: tainted