mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
Python: Add RemoteFlowSource for django handler without route
A bit scary that we don't have any tests to indicate that I forgot to add this :O
This commit is contained in:
@@ -1909,6 +1909,8 @@ private module Django {
|
||||
RemoteFlowSource::Range, DataFlow::ParameterNode {
|
||||
DjangoRouteHandlerRequestParam() {
|
||||
this.getParameter() = any(DjangoRouteSetup setup).getARequestHandler().getRequestParam()
|
||||
or
|
||||
this.getParameter() = any(DjangoViewClassHandlerWithoutKnownRoute setup).getRequestParam()
|
||||
}
|
||||
|
||||
override string getSourceType() { result = "django.http.request.HttpRequest" }
|
||||
|
||||
Reference in New Issue
Block a user