hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Feedback

Browse Source
This commit is contained in:
Kevin Stubbings
2024-10-29 15:45:11 -07:00
parent 02a664319a
commit 0483b8004c
1 changed files with 6 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
python/ql/lib/semmle/python/frameworks/Bottle.qll
View File

@@ -26,11 +26,8 @@ module Bottle {
* Provides models for Bottle applications.
*/
module App {
/** Gets class `bottle.Bottle`) */
API::Node cls() { result = API::moduleImport("bottle").getMember("Bottle") }
/** Gets a reference to a Bottle application (an instance of `bottle.Bottle`) */
API::Node instance() { result = cls().getReturn() }
API::Node instance() { result = bottle().getMember("Bottle").getReturn() }
/** Gets a reference to a Bottle application (an instance of `bottle.app`) */
API::Node app() { result = bottle().getMember("app").getReturn() }
@@ -45,15 +42,15 @@ module Bottle {
ViewCallable() { this = any(BottleRouteSetup rs).getARequestHandler() }
}
string routeMethods() { result = ["route", "get", "post", "put", "delete", "patch"] }
private class BottleRouteSetup extends Http::Server::RouteSetup::Range, DataFlow::CallCfgNode {
BottleRouteSetup() {
this =
[
App::instance()
.getMember(["route", "get", "post", "put", "delete", "patch"])
.getACall(),
App::app().getMember(["route", "get", "post", "put", "delete", "patch"]).getACall(),
bottle().getMember(["route", "get", "post", "put", "delete", "patch"]).getACall()
App::instance().getMember(routeMethods()).getACall(),
App::app().getMember(routeMethods()).getACall(),
bottle().getMember(routeMethods()).getACall()
]
}